Free Certificate of Cloud Security Knowledge v5 (CCSKv5.0) Practice Questions

A.  

Public

B.  

PaaS

C.  

Private

D.  

IaaS

E.  

Hybrid

A.  

A network of servers connected to execute processes

B.  

A collection of physical hardware used to run applications

C.  

A single software application hosted on the cloud

D.  

Application software deployable on infrastructure/platform

A.  

The laws protecting customer data are based on the cloud provider and customer location only.

B.  

The confidentiality agreements between companies using cloud computing services is limited legally to the company, not the provider.

C.  

The companies using the cloud providers are the custodians of the data entrusted to them.

D.  

The cloud computing companies are absolved of all data security and associated risks through contracts and data laws.

E.  

The cloud computing companies own all customer data.

A.  

Anti-virus Software

B.  

Load Balancer

C.  

Web Application Firewall

D.  

Intrusion Detection System

A.  

Application logic

B.  

Access controls

C.  

Encryption solutions

D.  

Physical destruction

E.  

Asset management and tracking

A.  

High operational costs

B.  

Misconfigurations

C.  

Limited scalability

D.  

Complex deployment pipelines

A.  

Only involves senior management in decision-making

B.  

Speeds up project execution irrespective of and focuses on systemic risk

C.  

Ensures adequate risk management while allowing innovation

D.  

Ensures alignment between global compliance standards

A.  

Poor provider documentation and over-reliance on pooled audit

B.  

Inconsistent policy standards and the proliferation of provider requirements

C.  

Excessive details shared by the cloud provider and consequent information overload

D.  

Limited visibility into internal operations and technology

A.  

It simplifies the encryption process by centralizing it at the network level

B.  

It enables ownership and more granular control of encryption keys

C.  

It reduces the need for encryption by enhancing network security

D.  

It delegates the control of keys to third-party providers

A.  

To minimize the risk of unauthorized access by assigning access rights based on role requirements

B.  

To streamline access across diverse systems or organizations

C.  

To continuously monitor user activity for suspicious behavior

D.  

To implement multiple layers of security checks for access control