Cloud Security Alliance Certificate of Cloud Security Knowledge v5 (CCSKv5.0)

QUESTION NO: 1
Which of the following best describes the shared responsibility model in cloud security?

A. Neither cloud providers nor customers are responsible for security. B. Cloud providers handle physical infrastructure security while customers handle workload security. C. Cloud providers handle both infrastructure and workload security. D. Customers handle both infrastructure and workload security.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
In the Software-as-a-service relationship, who is responsible for the majority of the security?

A. Web Application CISO B. Cloud Provider C. Application Developer D. Application Consumer E. Database Manager

Correct Answer: B

QUESTION NO: 3
Why is it important to plan and coordinate response activities for incidents affecting the Cloud Service Provider (CSP)?

A. It eliminates the need for monitoring systems B. It guarantees that no incidents will occur in the future C. It reduces the frequency of security audits required D. It ensures a systematic approach, minimizing damage and recovery time

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Which term describes any situation where the cloud consumer does
not manage any of the underlying hardware or virtual machines?

A. Virtual machineless B. Abstraction C. Container D. Provider managed E. Serverless computing

Correct Answer: E

QUESTION NO: 5
Use elastic servers when possible and move workloads to new instances.

A. True B. False

Correct Answer: A

QUESTION NO: 6
When establishing a cloud incident response program, what access do responders need to effectively analyze incidents?

A. Persistent read access and controlled write access for critical situations B. Full-read access without any approval process C. Unlimited write access for all responders at all times D. Access limited to log events for incident analysis

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
ENISA: A reason for risk concerns of a cloud provider being acquired is:

A. Mass layoffs may occur B. Provider may change physical location C. Resource isolation may fail D. Non-binding agreements put at risk E. Arbitrary contract termination by acquiring company

Correct Answer: D

QUESTION NO: 8
Which of the following is the MOST common cause of cloud-native security breaches?

A. Inability to monitor cloud infrastructure for threats B. IAM failures C. Lack of encryption for data at rest D. Vulnerabilities in cloud provider's physical infrastructure

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
Which aspect of cloud architecture ensures that a system can handle growing amounts of work efficiently?

A. Security B. Reliability C. Performance D. Scalability

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
In the context of incident response, which phase involves alerts validation to reduce false positives and estimates the incident's scope?

A. Preparation B. Post-Incident Analysis C. Detection & Analysis D. Containment, Eradication, & Recovery

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 11
Which of the following encryption methods would be utilized when object storage is used as the back-end for an application?

A. Database encryption B. Asymmetric encryption C. Client/application encryption D. Object encryption E. Media encryption

Correct Answer: C

QUESTION NO: 12
How does cloud adoption impact incident response processes in cybersecurity?

A. It simplifies incident response by consolidating processes B. It only affects data storage and not incident response C. It has no significant impact on incident response processes D. It introduces different processes, technologies, and governance models

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 13
All cloud services utilize virtualization technologies.

A. True B. False

Correct Answer: A

QUESTION NO: 14
Which of the following strategies best enhances infrastructure resilience against Cloud Service Provider (CSP) technical failures?

A. Single-region resiliency B. High Availability within one data center C. Local backup D. Multi-region resiliency

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Cloud Security Alliance Certificate of Cloud Security Knowledge v5 (CCSKv5.0) - CCSK Exam Questions