Free Certificate Of Cloud Security Knowledge Exam CCSK Exam Practice Test

For third-party audits or attestations, what is critical for providers to publish and customers to evaluate?

• Scope of the assessment and the exact included features and services for the assessment
• Provider infrastructure information including maintenance windows and contracts
• Network or architecture diagrams including all end point security devices in use
• Service-level agreements between all parties
• Full API access to all required services

What is true of a workload?

• It is a unit of processing that consumes memory
• It does not require a hardware stack
• It is always a virtual machine
• It is configured for specific, established tasks
• It must be containerized

Dynamic Application Security Testing (DAST) might be limited or require pre-testing permission from the provider.

• False
• True

ENISA: Which is not one of the five key legal issues common across all scenarios:

• Data protection
• Professional negligence
• Globalization
• Intellectual property
• Outsourcing services and changes in control

Which type of application security testing tests running applications and includes tests such as web vulnerability testing and fuzzing?

• Code Review
• Static Application Security Testing (SAST)
• Unit Testing
• Functional Testing
• Dynamic Application Security Testing (DAST)

Use elastic servers when possible and move workloads to new instances.

• False
• True

A security failure at the root network of a cloud provider will not compromise the security of all customers because of multitenancy configuration.

• False
• True

The containment phase of the incident response lifecycle requires taking systems offline.

• False
• True

What can be implemented to help with account granularity and limit blast radius with laaS an PaaS?

• Configuring secondary authentication
• Establishing multiple accounts
• Maintaining tight control of the primary account holder credentials
• Implementing least privilege accounts
• Configuring role-based authentication

Which of the following encryption methods would be utilized when object storage is used as the back-end for an application?

• Database encryption
• Media encryption
• Asymmetric encryption
• Object encryption
• Client/application encryption