CCSK Certificate of Cloud Security Knowledge (v4.0) Questions and Answers

It is a unit of processing that consumes memory

It does not require a hardware stack

It is always a virtual machine

It is configured for specific, established tasks

It must be containerized

Multi-tenancy

Nation-state boundaries

Measured service

Unlimited bandwidth

Hybrid clouds

Inspect and account for risks inherited from other members of the cloud supply chain and take active measures to mitigate and contain risks through operational resiliency.

Respect the interdependency of the risks inherent in the cloud supply chain and communicate the corporate risk posture and readiness to consumers and dependent parties.

Negotiate long-term contracts with companies who use well-vetted software application to avoid the transient nature of the cloud environment.

Provide transparency to stakeholders and shareholders demonstrating fiscal solvency and organizational transparency.

Both B and C.

It reduces hardware costs

It provides dynamic and granular policies with less management overhead

It locks down access and provides stronger data security

It reduces the blast radius of a compromised system

It enables you to configure applications around business groups

False

True

Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

Maintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.

Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.

Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.

Both B and D.

The metrics defining the service level required to achieve regulatory objectives.

The duration of time that a security violation can occur before the client begins assessing regulatory fines.

The cost per incident for security breaches of regulated information.

The regulations that are pertinent to the contract and how to circumvent them.

The type of security software which meets regulations and the number of licenses that will be needed.

False

True

Data Security and Encryption

Information Governance

Incident Response, Notification and Remediation

Compliance and Audit Management

Infrastructure Security

False

True

False

True

Attributes belong to entities and identities belong to attributes. Each attribute can have multiple identities but only one entity.

An attribute is a unique object within a database. Each attribute it has a number of identities which help define its parameters.

An identity is a distinct and unique object within a particular namespace. Attributes are properties which belong to an identity. Each identity can have multiple attributes.

Attributes are made unique by their identities.

Identities are the network names given to servers. Attributes are the characteristics of each server.

False

True