2023 Correct and Up-to-date Cloud Security Alliance CCSK BrainDumps [Q30-Q46]

Rate this post

2023 Correct and Up-to-date Cloud Security Alliance CCSK BrainDumps

Current CCSK dumps Preparation through Our Practice Test

NO.30 What is the characteristic that allows the cloud provider to meet various demands from customers while remaining financially viable?

Broad network access

Resource pooling

Rapid elasticit

Measured service

Resource pooling is characteristic that allows the cloud provider to meet various demands from customers while remaining financially viable.

NO.31 Which one of the following is the key techniques to create cloud infrastructure?

Data Classification

Orchestration

Orientation

Automation

The key techniques to create a cloud are abstraction and orchestration. We abstract the resources from the underlying physical infrastructure to create our pools, and use orchestration(and automation)to coordinate carving out and delivering a set of resources from the pools to the consumers. As you will see, these two techniques create all the essential characteristics we use to define something as a
“cloud.”
Ref: CSA Security Guidelines V4.0

NO.32 What is true of companies considering a cloud computing business relationship?

The laws protecting customer data are based on the cloud provider and customer location only.

The confidentiality agreements between companies using cloud computing services is limited legally to the company, not the provider.

The companies using the cloud providers are the custodians of the data entrusted to them.

The cloud computing companies are absolved of all data security and associated risks through contracts and data laws.

The cloud computing companies own all customer data.

NO.33 Which of the following adds abstraction layer on top of networking hardware and decouples network control plane from the data plane?

VLANs

Software Defined Networks

Virtual Private Networks

Converged Networks

Software Defined Networking(SDN):A more complete abstraction layer on top of networking hardware, SDNs decouple the network control plane from the data. This allows us to abstract networking from the traditional limitations of a LAN.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)

NO.34 Which ISO standards addresses Privacy in the cloud environment?

ISO 27017

ISO 27018

ISO 27034

ISO 27032

ISO/IEC 27018:2014 establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information (PII) in accordance with the privacy principles in ISO/IEC 29100 for the public cloud computing environment.

NO.35 ln order to determine critical assets and processes of the organization, it must first conduct a:

Risk Assessment

Business Impact Analysis(BIA)

Datacentre monitoring

Host hardening

This is a process known as the business impact analysis(BIA). We determine a value for every asset(usually in terms of dollars),,what it would cost the organization if we lost that asset(either temporarily or permanently), what it would cost to replace or repair that asset, and any alternate methods for dealing with that loss.

NO.36 Which of the following will not be provided by cloud services when requested by the customer?

DLP solution results

SIEM logs

Details of security controls

Geographical locations of the datacentre

The cloud service provider will not provide the details of security controls as it will harm the security of its infrastructure if the adversaries knows the details.

NO.37 Which of the below hypervisors are 0S based and are more attractive to attackers?

Type I

Type II

Type III

Type V

Type II hypervisors are 0S-based and more attractive to attackers. There are lot of vulnerabilities which are found not only on 0S but also in applications residing on the 0S.

NO.38 If the management plane has been breached, you should confirm the templates/configurations for your infrastructure or applications have not also been compromised.

False

True

NO.39 Which of the following is the correct pair of risk management standards?

ISO27002 & ISO27005

ISO27001 & ISO27018

ISO31000 & ISO27017

ISO27005 & ISO31000

IS027005 refers to processes for IT Risk Management whereas ISO31000 refers to Enterprise Risk Management

NO.40 Which of the following is not one of the essential characteristics as defined by NIST 800-145?

Broad Network Access

On-demand Shelf service

Rapid Elasticity

Resource Pooling

The key characteristic is on-demand self-service and not shelf” service.

NO.41 Database as a Service is an example of :

Infrastructure as a Service(IaaS)

Program as a Service(PaaS)

Platform as a Service(PaaS)

Software as a Service(SaaS)

One option. frequently seen in the real world and illustrated in our model. is to build a platform on top of IaaS. A layer of integration and middleware is built on IaaS. then pooled together. orchestrated. and exposed to customers using APIs as PaaS. For example, a Database as a Service could be built by deploying modified database management system software on instances running in IaaS. The customer manages the database via API (and a web console) and accesses it either through the normal database network protocols, or, again, via API.
Ref: CSA Security Guidelines V4.0

NO.42 ln which of the following cloud service models is the customer required to maintain the operating system?

PaaS

Public Cloud

IaaS

SaaS

According to “The NIST Definition of Cloud Computing,” in IaaS, “the capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include OSs and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over OSs, storage, and deployed applications; and possibly limited control of select networking components (e.g, host firewalls).”

NO.43 Which of the following leverages virtual network topologies to run more. smaller. and more isolated networks without incurring additional hardware costs that historically make such models prohibitive?

VLANS

Micro LANs

Micro segmentation

BitVLANS

Micro segmentation(also sometimes referred to as hyper segregation) leverages virtual network topologies to run more, smaller, and more isolated networks without incurring additional hardware costs that historically make such models prohibitive. Since the entire networks are defined in software without many of the traditional addressing issues, it is far more feasible to run these multiple, software- defined environments.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)

NO.44 Amount of risk that the leadership and stakeholders of an organization are willing to accept. is known as:

Residual Risk

Risk Tolerance

Risk Limitation

Risk Avoidance

Risk tolerance is the amount of risk that the leadership and stakeholders of an organization are willing to accept.

NO.45 On Demand Shelf Service is one of the key characteristics as defined by NIST.

True

False

This is false. Please read the question carefully.
Question: is asking
On Demand “Shelf” Service where the correct characteristic is “0n Demand Self Service”

NO.46 Who is responsible for Application Security in Software as a Service(SaaS) service model?

Cloud Customer

Cloud Service Provider

Cloud Carrier

It’s a shared responsibility between Cloud Service Provider and Cloud Customer

Its always a shared responsbility

Loading …