CCSK Practice Questions

A.  

Inspect and account for risks inherited from other members of the cloud supply chain and take active measures to mitigate and contain risks through operational resiliency.

B.  

Respect the interdependency of the risks inherent in the cloud supply chain and communicate the corporate risk posture and readiness to consumers and dependent parties.

C.  

Negotiate long-term contracts with companies who use well-vetted software application to avoid the transient nature of the cloud environment.

D.  

Provide transparency to stakeholders and shareholders demonstrating fiscal solvency and organizational transparency.

E.  

Both B and

C.  

A.  

It may require a subpoena of the provider directly

B.  

It would require a previous access agreement

C.  

It would require an act of war

D.  

It would require a previous contractual agreement to obtain the application or access to the environment

E.  

It would never be obtained in this situation

A.  

AI enhances security without any adverse implications

B.  

AI mainly reduces manual work with no significant security impacts

C.  

AI enhances detection mechanisms but could be exploited for sophisticated attacks

D.  

AI is only beneficial in data management, not security

A.  

By rotating keys on a regular basis

B.  

By using default policies for all keys

C.  

By specifying fine-grained permissions

D.  

By granting root access to administrators

A.  

Satisfies compliance and security requirements

B.  

Integration with application development frameworks and middleware capabilities

C.  

Limited configuration options increases security risks

D.  

Fully hosted application stack

A.  

Lack of visibility

B.  

Deployment flexibility

C.  

Scaling and costs

D.  

Intelligence sharing

E.  

Insulation of clients

A.  

Integration with network infrastructure

B.  

Adherence to software development practices

C.  

Optimization for cost reduction

D.  

Alignment with security objectives and regulatory requirements

A.  

Anomaly detection

B.  

Assisting analysts

C.  

Threat intelligence

D.  

Automated responses

A.  

The IdP is used for authentication purposes and does not play a role in managing access to deployments.

B.  

The IdP manages user, group, and role mappings for access to deployments across cloud providers.

C.  

The IdP solely manages access within a deployment and resides within the deployment infrastructure.

D.  

The IdP is responsible for creating deployments and setting up access policies within a single cloud provider.

A.  

Cloud Service Customers (CSCs) are solely responsible for security in the cloud environment. The Cloud Service Providers (CSPs) are accountable.

B.  

Cloud Service Providers (CSPs) and Cloud Service Customers (CSCs) share security responsibilities. The exact allocation of responsibilities depends on the technology and context.

C.  

Cloud Service Providers (CSPs) are solely responsible for security in the cloud environment. Cloud Service Customers (CSCs) have an advisory role.

D.  

Cloud Service Providers (CSPs) and Cloud Service Customers (CSCs) share security responsibilities. The allocation of responsibilities is constant.