CCSK practice questions 51–60

1. Question 51 · 207 in bank

   How is encryption managed on multi-tenant storage?

   • ASingle key for all data owners
   • BOne key per data owner
   • CMultiple keys per data owner
   • DThe answer could be A, B, or C depending on the provider
   • EC for data subject to the EU Data Protection Directive; B for all others

   Show answer

   Answer: B

   Next question

2. Question 52 · 207 in bank

   Which statement best describes why it is important to know how data is being accessed?

   • AThe devices used to access data have different storage formats.
   • BThe devices used to access data use a variety of operating systems and may have different programs installed on them.
   • CThe device may affect data dispersion.
   • DThe devices used to access data use a variety of applications or clients and may have different security characteristics.
   • EThe devices used to access data may have different ownership characteristics.

   Show answer

   Answer: D

   Next question

3. Question 53 · 207 in bank

   What is resource pooling?

   • AThe provider's computing resources are pooled to serve multiple consumers.
   • BInternet-based CPUs are pooled to enable multi-threading.
   • CThe dedicated computing resources of each client are pooled together in a colocation facility.
   • DPlacing Internet (ג€cloudג€) data centers near multiple sources of energy, such as hydroelectric dams.
   • ENone of the above.

   Show answer

   Answer: A

   Next question

4. Question 54 · 207 in bank

   Your SLA with your cloud provider ensures continuity for all services.

   • AFalse
   • BTrue

   Show answer

   Answer: A

   Next question

5. Question 55 · 207 in bank

   Which of the following is NOT normally a method for detecting and preventing data migration into the cloud?

   • AIntrusion Prevention System
   • BURL filters
   • CData Loss Prevention
   • DCloud Access and Security Brokers (CASB)
   • EDatabase Activity Monitoring

   Show answer

   Answer: A

   Next question

6. Question 56 · 207 in bank

   In which type of environment is it impractical to allow the customer to conduct their own audit, making it important that the data center operators are required to provide auditing for the customers?

   • AMulti-application, single tenant environments
   • BLong distance relationships
   • CMulti-tenant environments
   • DDistributed computing arrangements
   • ESingle tenant environments

   Show answer

   Answer: C

   Next question

7. Question 57 · 207 in bank

   ENISA: Lock-in is ranked as a high risk in ENISA research, a key underlying vulnerability causing lock in is:

   • ALack of completeness and transparency in terms of use
   • BLack of information on jurisdictions
   • CNo source escrow agreement
   • DUnclear asset ownership
   • EAudit or certification not available to customers

   Show answer

   Answer: A

   Next question

8. Question 58 · 207 in bank

   What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?

   • AAllowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.
   • BMaintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.
   • CPractice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.
   • DKeep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.
   • EBoth B and D.

   Show answer

   Answer: B

   Next question

9. Question 59 · 207 in bank

   ENISA: A reason for risk concerns of a cloud provider being acquired is:

   • AArbitrary contract termination by acquiring company
   • BResource isolation may fail
   • CProvider may change physical location
   • DMass layoffs may occur
   • ENon-binding agreements put at risk

   Show answer

   Answer: E

   Next question

10. Question 60 · 207 in bank

    Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?

    • ASoftware Development Kits (SDKs)
    • BResource Description Framework (RDF)
    • CExtensible Markup Language (XML)
    • DApplication Binary Interface (ABI)
    • EApplication Programming Interface (API)

    Show answer

    Answer: E

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSK practice, question 51. 207 questions available.