Free Cloud Security Alliance CCSK Exam Questions and Answer from Training Expert 2Pass4sure

Top Cloud Security Alliance CCSK Courses Online

How to Prepare For Certificate of Cloud Security Knowledge (CCSK) Exam

Preparation Guide for the Certificate of Cloud Security Knowledge (CCSK) Exam

Introduction

The Cloud Security Alliance (CSA) is a non-profit organization to promote the use of best practices in Cloud Computing to provide security assurance and providing training on the use of cloud computing to help secure all other forms of computing.

The Cloud Security Alliance (CSA) is the leading association in the world committed to identifying and raising awareness of best practices to help ensure a safe environment for cloud computing. Worldwide, the CSA has over 80,000 individual members. In 2011, when the American Presidential Administration chose the CSA Summit as the venue for announcing the cloud computing policy of the federal government, CSA acquired a major reputation.

The purpose of this exam guide is to provide you with all the required exam information and to help you prepare successfully for the Certificate of Cloud Security Knowledge CCSk exam tests. This guide provides information on the target audience of the certification test, suggested training and documentation, and a comprehensive list of exam objectives, all to help you get a passing score. To boost your chances of passing the test, find the CCSk exam dumps from the links provided.

NO.74 Application security is a shared responsibility between cloud service provider between cloud service provider and cloud customer Platform as a Service(PaaS) model.

 True

 False

It is false.
This type of question is there to confuse students. Although, we do develop applications on platform provided, its security is total responsibility of the cloud customer.

NO.75 Single cloud assets are typically less resilient than in the case of traditional infrastructure.

 True

 False

Cloud platforms can be incredibly resilient. but single cloud assets are typically less resilient than in the case of traditional infrastructure. This is due to the inherently greater fragility of virtualized resources running in highly-complex environments.
Reference: CSA Security Guidelines V.4 (reproduced here for the educational purpose)

NO.76 How is encryption managed on multi-tenant storage?

 Single key for all data owners

 One key per data owner

 Multiple keys per data owner

 The answer could be A, B, or C depending on the provider

 C for data subject to the EU Data Protection Directive; B for all others

NO.77 Which of the following is true when we talk about compliance inheritance?

 Cloud Service Provider’s infrastructure should be included in the customer’s compliance audit

 Cloud Service Provider’s infrastructure is out of scope in the customer’s compliance audit

 Everything the customer configures and builds on top of the certified services is out of sec

 There is no need for compliance audit by customer since the Cloud Service Provider is already compliant.

With compliance inheritance, the cloud provider’s infrastructure is out of scope fora customer’s compliance audit, but everything the customer configures and builds on top of the certified services is still within scope.
Reference: CSA Security GuidelinesV.4 (reproduced here for the educational purpose)

NO.78 In which service model, cloud consumer is responsible to manage authorizations and entitlements only?

 Infrastructure as a Service (IaaS)

 Platform as a Service (PaaS)

 Software as a Service (SaaS)

 All of them

It is important to read the question carefully and then choose the best answer. Although cloud consumer is responsible for authorizations and entitlements across all service models but questions uses
“only”. Therefore, answer is Software as a Service (SaaS) and a SaaS provider is responsible for perimeter security, logging/ monitoring/auditing, and application security.

NO.79 Which attack surfaces, if any, does virtualization technology introduce?

 The hypervisor

 Virtualization management components apart from the hypervisor

 Configuration and VM sprawl issues

 All of the above

NO.80 No policy on resource capping can lead to:

 Data disclosure

 Data manipulation

 Resource manipulation

 Resource Exhaustion

It can lead to resource exhaustion if you do not put upper limit on resource allocation.
Cloud services are on-demand Therefore there is a level of calculated risk in allocating all the resources of a cloud service, because resources are allocated according to statistical projections. In accurate modelling of resources usage- common resources allocation algorithms are vulnerable to distortions of fairness

NO.81 Which are the two major categories of network virtualization commonly seen in cloud computing today?

 Virtual Private Networks and Converged Network

 Software Defined Networks and Virtual Private Networks

 Software Defined Networks and Virtual LANs(VLANs)

 Virtual LANS(VLANs)and Converged Networks

There are two major categories of network virtualization commonly seen in cloud computing today:
. Virtual Local Area Networks (VLANs): VLANs leverage existing network technology implemented in most network hardware.
VLANs are extremely common in enterprise networks, even without Management Storage Service Management plane to nodes storage nodes (volumes) to compute nodes (instances) Internet to compute nodes Instances to instance Common networks underlying IaaS. They are designed for use in single-tenant networks (enterprise data centers) to separate different business units, functions, etc. (like guest networks). VLANs are not designed for cloud-scale virtualization or security and shouldn’t be considered, on their own, an effective security control for isolating networks. They are also never a substitute for physical network segregation.
. Software Defined Networking(SDN): A more complete abstraction layer on top of networking hardware, SDNs decouple the network control plane from the data. This allows us to abstract networking from the traditional limitations of a LAN.
Ref: CSA Security Guidelines V.4 (reproduced here for the educational purpose)

NO.82 Which of the following is NOT a characteristic of cloud computing?

 On-demand self service

 Resource Pooling

 Metered service

 Reduced personnel cost

The characteristics of cloud computing are
1. 0n-demand self-service: A consumer can unilaterally provision computing capabilities, such as server time and network storage, as needed automatically without requiring human interaction with each service provider.
2. Broad network access: Capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms(e.g, mobile phones, tablets, laptops and workstations).
3. Resource pooling: The provider’s computing resources are pooled to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand. There is a sense of location independence in that the customer generally has no control or knowledge over the exact location of the provided resources but may be able to specify location at a higher level of abstraction(e.g, country, state or datacenter).
Examples of resources include storage, processing, memory and network bandwidth.
4. Rapid elasticity: Capabilities can be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with demand. To the consumer, the capabilities available for provisioning often appear to be unlimited and can be appropriated in any quantity at anytime.
5. Measured service: Cloud systems automatically control and optimize resource use by leveraging a metering capability at some level of abstraction appropriate to the type of service(e.g, storage, processing, bandwidth and active user accounts).
Resource usage can be monitored, controlled and reported, providing transparency for the provider and consumer.

NO.83 Dynamic Application Security Testing (DAST) might be limited or require pre-testing permission from the provider.

 False

 True

NO.84 Which concept provides the abstraction needed for resource pools?

 Virtualization

 Applistructure

 Hypervisor

 Metastructure

 Orchestration

NO.85 What is true of companies considering a cloud computing business relationship?

 The laws protecting customer data are based on the cloud provider and customer location only.

 The confidentiality agreements between companies using cloud computing services is limited legally to the company, not the provider.

 The companies using the cloud providers are the custodians of the data entrusted to them.

 The cloud computing companies are absolved of all data security and associated risks through contracts and data laws.

 The cloud computing companies own all customer data.

NO.86 One of the primary benefits of the cloud is the ability to perform dynamic allocation of physical resources when required. The most common approach is a multi-tenant environment. However, it increases risk of disclosure of customer dat a. This can happen because of which of the following?

 Isolation Failure

 Increased DDoS

 No disaster recovery plan

 Tenancy termination

All resources allocated to a particular tenant should be “isolated” and protected to avoid disclosure of information to other tenants For example, when allocated storage is no longer needed IIS Security Considerations for Cloud Computing by a client it can be freely reallocated to another enterprise. ln that case, sensitive data could be disclosed if the storage has not been scrubbed thoroughly(e.g, using forensic software).

NO.87 Which of the following describes the cloud security reference architecture?

 ISO 27001

 ISO 17788

 ISO 17789

 ISO 27032

ISO 17788 has a cloud reference architecture

NO.88 Who is responsible for Application Security in Software as a Service(SaaS) service model?

 Cloud Customer

 Cloud Service Provider

 Cloud Carrier

 It’s a shared responsibility between Cloud Service Provider and Cloud Customer

Its always a shared responsbility

 Loading …

Average Salary of Certificate of Cloud Security Knowledge (CCSK) Exam Certified Professionals

The average salary of a Certificate of Cloud Security Knowledge (CCSK) Exam Certified Professional is:

• England: 45,000 POUND
• India: 4,477,000 INR
• United State: 60,550 USD
• Europe: 50,000 EURO

New (2022) Cloud Security Alliance CCSK Exam Dumps: https://www.2pass4sure.com/Cloud-Security-Knowledge/CCSK-actual-exam-braindumps.html

         

Related Links: www.stes.tyc.edu.tw myportal.utt.edu.tt myportal.utt.edu.tt myportal.utt.edu.tt myportal.utt.edu.tt myportal.utt.edu.tt