Practice CCSK Exam Online

Question 1

Which of the following is not one of the "meta-phases" described by the Cloud Security Alliance?

A : Secure Operations

B : Secure Deployment

C : Secure Optimization

D : Secure Design and Development

Answer: C

Question 2

What should every cloud customer set up with its cloud service provider (CSP) that can be utilized in the event of an incident?

A : A data destruction plan

B : A communication plan

C : A back-up website

D : A spill remediation kit

E : A rainy day fund

Answer: B

Question 3

Which action is part of the containment phase of the incident response lifecycle?

A : Evaluating infrastructure by proactive scanning and network monitoring, vulnerability assessments, and performing risk assessments

B : Planning notification and coordination of activities

C : Making considerations for data loss versus service availability

D : Configuring and validating alerts

E : Analyzing what happened

Answer: C

Question 4

In which phase of an incident response lifecycle might you build a timeline of the attack?

A : Detection and analysis

B : Post-mortem

C : Containment, eradication, and Recovery

D : Preparation

Answer: A

Question 5

Your supervisor is very concerned about your planned migration to the cloud. One of the main concerns is the fact that there may be fewer logging capabilities to monitor the solution. What can you tell your supervisor?

A : The cloud provider can permit logging of the underlying service

B : The technology stack can be instrumented for additional logging capabilities

C : The cloud provider can always open more ports

D : This is a reality of cloud-based solutions and if large monitoring metrics are needed, the cloud should be avoided

Answer: B

Name:	Certificate of Cloud Security Knowledge
Exam Code:	CCSK
Certification:	CSA Cloud Security
Vendor:	Cloud Security Alliance
Total Questions:	274
Last Updated:	Apr 24, 2024

Cloud Security Alliance CCSK