Free CCSK Exam Files Verified & Correct Answers Downloaded Instantly
Instant Download CCSK Dumps Q&As Provide PDF&Test Engine
NEW QUESTION # 40
In a cloud environment, "unclear roles& responsibilities" and "no control over vulnerability process" on part of cloud customer can lead to:
- A. Poor management of cloud Infrastructure
- B. Lack of Disaster Recovery
- C. Loss of Governance
- D. Denial of Service Attacks
Answer: C
Explanation:
It can lead to loss of governance.
In using cloud infrastructures, the client necessarily cedes control to the cloud service provider(CSP) on several issues which may affect security.
The loss of governance and control could have a potentially severe impact on the organization's strategy and therefore on the capacity to meet its mission and goals. The loss of control and governance could lead to the impossibility of complying with the security requirements, a lack of confidentiality, integrity and availability of data, and a deterioration of performance and quality of service, not to mention the introduction of compliance challenges.
Source: ENISA- Security Risk and Benefits
NEW QUESTION # 41
If in certain litigations and investigations, the actual cloud application or environment itself is relevant to resolving the dispute in the litigation or investigation, how is the information likely to be obtained?
- A. It may require a subpoena of the provider directly
- B. It would require an act of war
- C. It would require a previous contractual agreement to obtain the application or access to the environment
- D. It would never be obtained in this situation
- E. It would require a previous access agreement
Answer: C
NEW QUESTION # 42
Which of the following is key benefit of private cloud model?
- A. Assurance of Data Location
- B. Off-loading IT Management
- C. Less expensive
- D. Distributed data location
Answer: A
Explanation:
One of the key challenges in cloud computing is its distributed environment and dispersed data centers across the globe. It is very difficult to trace data location in public clouds.
Therefore. Assurance of data location is key advantage of private cloud.
NEW QUESTION # 43
In the IaaS hosted environment. who is ultimately responsible for platform security?
- A. Customer
- B. Joint responsibility
- C. Cloud Service Provider
- D. System Administrator
Answer: A
Explanation:
In IaaS hosted environment, Platform security is responsibility of the customer whereas infrastructure security is a shared responsibility between cloud service provider and the customer
NEW QUESTION # 44
Lack of standard data formats and service interfaces can lead to:
- A. API Mis-management
- B. Vendor lock out
- C. Denial of Service
- D. Vendor lock in
Answer: D
Explanation:
Lack of tools, procedures or standard data formats or services interfaces that could guarantee data and service portability, makes it extremely difficult for a customer to migrate from one provider to another, or to migrate data and services to or from an in-House IT environment.
NEW QUESTION # 45
Which of the followinglS0 Standard provides Code of practice for information security controls based on IS0/IEC 27002for cloud services?
- A. ISO 27017
- B. ISO 27018
- C. ISO 27032
- D. ISO 27034
Answer: A
Explanation:
IS0 27017 provides Code of practice for information security controls based on ISO/IEC27002 for cloud services.
NEW QUESTION # 46
Which of the following is NOT one of the vulnerabilities that can lead of risk of "abuse of high privilege roles" or "Cloud provider malicious insider''?
- A. AAA Vulnerabilities
- B. Poor enforcement of role definitions
- C. Lack of data centre hardware redundancy
- D. System and 0S vulnerabilities
Answer: C
Explanation:
Redundancy has nothing to do with abuse of high privilege roles. All others can lead to risk of risk of
"abuse of high privilege roles" or "Cloud provider malicious insider"
NEW QUESTION # 47
When creating business strategies for cloud migration. which is the most important aspect?
- A. Valuating current staff for their capabilities
- B. Choosing the right auditor
- C. Due Diligence when inspecting technologies and choosing cloud provider
- D. Hiring a cloud broker
Answer: C
Explanation:
Due Diligence is most important aspect when considering adoption to the cloud
NEW QUESTION # 48
What are the primary security responsibilities of the cloud provider in the management infrastructure?
- A. Building and properly configuring a secure network infrastructure
- B. Configuring second factor authentication across the network
- C. Properly configuring the deployment of the virtual network, especially the firewalls
- D. Properly configuring the deployment of the virtual network, except the firewalls
- E. Providing as many API endpoints as possible for custom access and configurations
Answer: D
NEW QUESTION # 49
Who is responsible for Application Security in Software as a Service(SaaS) service model?
- A. Cloud Customer
- B. Cloud Carrier
- C. It's a shared responsibility between Cloud Service Provider and Cloud Customer
- D. Cloud Service Provider
Answer: C
Explanation:
Its always a shared responsbility
NEW QUESTION # 50
Like security and compliance. BC/DR is not a shared responsibility.
- A. True
- B. False
Answer: A
Explanation:
This is True
Like security and compliance, BC/DR is a shared responsibility. There are aspects that the cloud provider has to manage, but the cloud customer is also ultimately responsible for how they use and manage the cloud service. This is especially true when planning for outages of the cloud provider (or parts of the cloud provider's service).
Ref Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION # 51
Single cloud assets are typically less resilient than in the case of traditional infrastructure.
- A. True
- B. False
Answer: A
Explanation:
Cloud platforms can be incredibly resilient. but single cloud assets are typically less resilient than in the case of traditional infrastructure. This is due to the inherently greater fragility of virtualized resources running in highly-complex environments.
Reference: CSA Security Guidelines V.4 (reproduced here for the educational purpose)
NEW QUESTION # 52
According to Cloud Security Alliance logical model of cloud computing, which of the following defines the protocols and mechanisms that provide the interface between the infrastructure layer and the other layers.
- A. Metastructure
- B. Infostructure
- C. Infrastructure
- D. Applistructure
Answer: A
Explanation:
According to CSA Securityguidelines4.0. Metastucture is defined as the protocols and mechanisms that provide the interface between the infrastructure layer and the other layers. The glue that ties the technologies and enables management and configuration.
NEW QUESTION # 53
Which are the two major categories of network virtualization commonly seen in cloud computing today?
- A. Software Defined Networks and Virtual LANs(VLANs)
- B. Virtual Private Networks and Converged Network
- C. Software Defined Networks and Virtual Private Networks
- D. Virtual LANS(VLANs)and Converged Networks
Answer: D
Explanation:
There are two major categories of network virtualization commonly seen in cloud computing today:
. Virtual Local Area Networks (VLANs): VLANs leverage existing network technology implemented in most network hardware.
VLANs are extremely common in enterprise networks, even without Management Storage Service Management plane to nodes storage nodes (volumes) to compute nodes (instances) Internet to compute nodes Instances to instance Common networks underlying IaaS. They are designed for use in single-tenant networks (enterprise data centers) to separate different business units, functions, etc. (like guest networks). VLANs are not designed for cloud-scale virtualization or security and shouldn't be considered, on their own, an effective security control for isolating networks. They are also never a substitute for physical network segregation.
. Software Defined Networking(SDN): A more complete abstraction layer on top of networking hardware, SDNs decouple the network control plane from the data. This allows us to abstract networking from the traditional limitations of a LAN.
Ref: CSA Security Guidelines V.4 (reproduced here for the educational purpose)
NEW QUESTION # 54
The most pragmatic option for data disposal in the cloud is which of the following?
- A. Crypto shredding
- B. Overwriting
- C. Cold fusion
- D. Melting
Answer: A
NEW QUESTION # 55
Select the best definition of "compliance" from the options below.
- A. The process of completing all forms and paperwork necessary to develop a defensible paper trail.
- B. The awareness and adherence to obligations, including the assessment and prioritization of corrective actions deemed necessary and appropriate.
- C. The diligent habits of good security practices and recording of the same.
- D. The development of a routine that covers all necessary security measures.
- E. The timely and efficient filing of security reports.
Answer: B
NEW QUESTION # 56
Which of the following is NOT a key subsystem recommended for monitoring in cloud environments?
- A. Cables
- B. Disk
- C. Network
- D. CPU
Answer: A
Explanation:
Network, CPU and Disk(storage) are key subsystems in cloud environment that should be monitored.
NEW QUESTION # 57
Term which defined acquired IT Technologies without the knowledge of IT Department is:
- A. Shadow servers
- B. Shadow application
- C. Shadow devices
- D. Shadow IT
Answer: D
Explanation:
Shadow IT is a term often used to describe information-technology systems and solutions built and used inside organizations without explicit organizational approval.
NEW QUESTION # 58
Security Governance, Risk and Compliance(GRC) is, generally, responsibility of which of the following across all the platforms (IaaS, PaaS and SaaS)?
- A. Customer
- B. Cloud Service Provider
- C. Shared responsibility
- D. Joint Responsibility
Answer: A
Explanation:
GRC is responsibility of the customer across all service models.
NEW QUESTION # 59
Which is the key technology that enables the sharing of resources and makes cloud computing most viable in terms of cost savings?
- A. Virtualization
- B. Software Defined Networking(SDN)
- C. Content Delivery Networks(CDN)
- D. Scalability
Answer: A
Explanation:
Virtualization is the foundational technology that underlies and makes cloud computing possible.
Virtualization is based on the use of powerful host computers to provide a shared resource pool that can be managed to maximize the number of guest operating systems(OSs) running on each host.
NEW QUESTION # 60
Your SLA with your cloud provider ensures continuity for all services.
- A. True
- B. False
Answer: B
NEW QUESTION # 61
......
The CCSK certification is a valuable credential for IT professionals looking to establish themselves as experts in cloud security. Certificate of Cloud Security Knowledge (v4.0) Exam certification demonstrates a deep understanding of cloud security principles and best practices, and is recognized globally as a standard for cloud security expertise. The CCSK v4.0 exam covers a wide range of cloud security topics and is regularly updated to reflect changes in the cloud security landscape.
Exam Valid Dumps with Instant Download Free Updates: https://www.actualcollection.com/CCSK-exam-questions.html
Fast Exam Updates CCSK dumps with PDF Test Engine Practice: https://drive.google.com/open?id=1J7eR6V5Q626yXxbONOcqgbwrLHP9qhQt