What is true of security as it relates to cloud network infrastructure?

You should implement a default deny with cloud firewalls.

You should apply cloud firewalls on a per-network basis.

You should deploy your cloud firewalls identical to the existing firewalls.

You should always open traffic between workloads in the same virtual subnet for better visibility.

You should implement a default allow with cloud firewalls and then restrict as necessary.

You should implement a default deny with cloud firewalls.

Which statement best describes the impact of Cloud Computing on business continuity management?

Geographic redundancy ensures that Cloud Providers provide highly available services.

A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.

The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomes necessary.

Customers of SaaS providers in particular need to mitigate the risks of application lock-in.

Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.

Geographic redundancy ensures that Cloud Providers provide highly available services.

What is true of companies considering a cloud computing business relationship?

The companies using the cloud providers are the custodians of the data entrusted to them.

The laws protecting customer data are based on the cloud provider and customer location only.

The confidentiality agreements between companies using cloud computing services is limited legally to the company, not the provider.

The companies using the cloud providers are the custodians of the data entrusted to them.

The cloud computing companies are absolved of all data security and associated risks through contracts and data laws.

The cloud computing companies own all customer data.

When deploying Security as a Service in a highly regulated industry or environment, what should both parties agree on in advance and include in the SLA?

The metrics defining the service level required to achieve regulatory objectives.

The duration of time that a security violation can occur before the client begins assessing regulatory fines.

The cost per incident for security breaches of regulated information.

The regulations that are pertinent to the contract and how to circumvent them.

The type of security software which meets regulations and the number of licenses that will be needed.

How is encryption managed on multi-tenant storage?

The answer could be A, B, or C depending on the provider

C for data subject to the EU Data Protection Directive; B for all others

Which statement best describes why it is important to know how data is being accessed?

The devices used to access data use a variety of applications or clients and may have different security characteristics.

The devices used to access data have different storage formats.

The devices used to access data use a variety of operating systems and may have different programs installed on them.

The device may affect data dispersion.

The devices used to access data use a variety of applications or clients and may have different security characteristics.

The devices used to access data may have different ownership characteristics.

What is resource pooling?

The provider’s computing resources are pooled to serve multiple consumers.

Internet-based CPUs are pooled to enable multi-threading.

The dedicated computing resources of each client are pooled together in a colocation facility.

Placing Internet (“cloud”) data centers near multiple sources of energy, such as hydroelectric dams.

Which of the following is NOT normally a method for detecting and preventing data migration into the cloud?

Cloud Access and Security Brokers (CASB)

In which type of environment is it impractical to allow the customer to conduct their own audit, making it important that the data center operators are required to provide auditing for the customers?

Multi-application, single tenant environments

Distributed computing arrangements

ENISA: Lock-in is ranked as a high risk in ENISA research, a key underlying vulnerability causing lock in is:

Lack of completeness and transparency in terms of use

Lack of information on jurisdictions

Audit or certification not available to customers

What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?

Maintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.

Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

Maintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.

Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.

Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.

ENISA: A reason for risk concerns of a cloud provider being acquired is:

Non-binding agreements put at risk

Arbitrary contract termination by acquiring company

Provider may change physical location

Non-binding agreements put at risk

Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?

Application Programming Interface (API)

Software Development Kits (SDKs)

Resource Description Framework (RDF)

Extensible Markup Language (XML)

Application Binary Interface (ABI)

Application Programming Interface (API)

ENISA: Which is not one of the five key legal issues common across all scenarios:

Outsourcing services and changes in control

What are the primary security responsibilities of the cloud provider in the management infrastructure?

Properly configuring the deployment of the virtual network, except the firewalls

Building and properly configuring a secure network infrastructure

Configuring second factor authentication across the network

Properly configuring the deployment of the virtual network, especially the firewalls

Properly configuring the deployment of the virtual network, except the firewalls

Providing as many API endpoints as possible for custom access and configurations

What is true of a workload?

It is a unit of processing that consumes memory

It does not require a hardware stack

It is configured for specific, established tasks

ENISA: Which is a potential security benefit of cloud computing?

More efficient and timely system updates

Provider can obfuscate system O/S and versions

Greater compatibility with customer IT infrastructure

The Software Defined Perimeter (SDP) includes which components?

Client, Controller, and Gateway

Client, Controller, Firewall, and Gateway

Controller, Firewall, and Gateway

Client, Controller, and Firewall

Which cloud security model type provides generalized templates for helping implement cloud security?

Conceptual models or frameworks

Select the statement below which best describes the relationship between identities and attributes

Attributes are made unique by their identities.

Attributes belong to entities and identities belong to attributes. Each attribute can have multiple identities but only one entity.

An attribute is a unique object within a database. Each attribute it has a number of identities which help define its parameters.

An identity is a distinct and unique object within a particular namespace. Attributes are properties which belong to an identity. Each identity can have multiple attributes.

Attributes are made unique by their identities.

Identities are the network names given to servers. Attributes are the characteristics of each server.

How should an SDLC be modified to address application security in a Cloud Computing environment?

Integrated development environments

Updated threat and trust models

Which governance domain focuses on proper and adequate incident detection, response, notification, and remediation?

Incident Response, Notification and Remediation

Compliance and Audit Management

Which opportunity helps reduce common application security issues?

Decreased use of micro-services

Fewer serverless configurations

What is the most significant security difference between traditional infrastructure and cloud computing?

Secondary authentication factors

Mobile security configuration options

When investigating an incident in an Infrastructure as a Service (IaaS) environment, what can the user investigate on their own?

Their own virtual instances in the cloud

The logs of all customers in a multi-tenant cloud

The network components controlled by the CSP

Their own virtual instances in the cloud

If in certain litigations and investigations, the actual cloud application or environment itself is relevant to resolving the dispute in the litigation or investigation, how is the information likely to be obtained?

It would require a previous contractual agreement to obtain the application or access to the environment

It may require a subpoena of the provider directly

It would require a previous access agreement

It would require a previous contractual agreement to obtain the application or access to the environment

It would never be obtained in this situation

What are the primary security responsibilities of the cloud provider in compute virtualizations?

Enforce isolation and maintain a secure virtualization infrastructure

Monitor and log workloads and configure the security settings

Enforce isolation and configure the security settings

Maintain a secure virtualization infrastructure and configure the security settings

Enforce isolation and monitor and log workloads

CSA - Cloud Security Alliance CCSK Practice Test 2 - Free Online Exam Prep & Questions

In volume storage, what method is often used to support resiliency and security?

A.

proxy encryption

B.

data rights management

C.

hypervisor agents

D.

data dispersion

E.

random placement

CSA - Cloud Security Alliance CCSK Practice Test 2

Question

CSA - Cloud Security Alliance CCSK Practice Tests

Practice Tests