CCSK Dumps 2022 New Cloud Security Alliance CCSK Exam Questions [Q30-Q49]

CCSK Dumps 2022 – New Cloud Security Alliance CCSK Exam Questions

Free CCSK braindumps download (CCSK exam dumps Free Updated)

Topics of Certificate of Cloud Security Knowledge (CCSK) Exam

This syllabus outline for the Certificate of Cloud Security Knowledge (CCSK) Exam can be found in the CCSk exam dumps pdf and focuses on the critical areas of the exam. Below, the main sections along with their subsections are listed:

1. Cloud Computing Concepts and Architectures

Objectives covered by this section:

• Cloud Security Scope, Responsibilities, and Models
• Deployment Models
• Service Models

2. Governance and Enterprise Risk Management

Objectives covered by this section:

• Effects of various Service and Deployment Models
• Enterprise Risk Management in the Cloud
• Cloud Risk Trade-offs and Tools
• Tools of Cloud Governance

3. Legal Issues, Contracts, and Electronic Discovery

Objectives covered by this section:

• Regional Considerations
• Due Diligence
• Legal Frameworks Governing Data Protection and Privacy
• Data Collection
• Data Preservation
• Cross-Border Data Transfer

4. Compliance and Audit Management

Objectives covered by this section:

• Compliance in the Cloud
• Compliance impact on cloud contracts
• Audit scope
• Compliance scope
• Right to audit
• Compliance analysis requirements
• Audit Management in the Cloud

5. Information Governance

Objectives covered by this section:

• Six phases of the Data Security Lifecycle and their key elements
• Data Security Functions, Actors and Controls
• Governance Domains

6. Management Plane and Business Continuity

Objectives covered by this section:

• Business Continuity and Disaster Recovery in the Cloud
• Architect for Failure
• Management Plane Security

7. Infrastructure Security

Objectives covered by this section:

• Security Changes With Cloud Networking
• Cloud Network Virtualization
• Cloud Compute and Workload Security
• Hybrid Cloud Considerations
• Challenges of Virtual Appliances

8. Virtualization and Containers

Objectives covered by this section:

• Storage
• Mayor Virtualizations Categories
• Containers
• Network

9. Incident Response

Objectives covered by this section:

• How the Cloud Impacts IR
• Incident Response Lifecycle

10. Application Security

Objectives covered by this section:

• Opportunities and Challenges
• How Cloud Impacts Application Design and Architectures
• Secure Software Development Lifecycle
• The Rise and Role of DevOps

11. Data Security and Encryption

Objectives covered by this section:

• Managing Data Migrations to the Cloud
• Cloud Data Storage Types
• Securing Data in the Cloud
• Data Security Controls

12. Identity, Entitlement, and Access Management

Objectives covered by this section:

• Entitlement and Access Management
• IAM Standards for Cloud Computing
• Authentication and Credentials
• Managing Users and Identities

13. Security as a Service

Objectives covered by this section:

• Potential Benefits and Concerns of SecaaS
• Major Categories of Security as a Service Offerings

14. Related Technologies

Objectives covered by this section:

• Internet of Things
• Big Data
• Mobile
• Serverless Computing

15. ENISA Cloud Computing: Benefits, Risks, and Recommendations for
Information Security

Objectives covered by this section:

• VM hopping
• Economic Denial of Service
• Top security risks in ENISA research
• Security benefits of cloud
• Five key legal issues common across all scenarios
• In Infrastructure as a Service (IaaS), who is responsible for guest systems monitoring
• Risks R.1 – R.35 and underlying vulnerabilities
• Data controller versus data processor definitions
• User provisioning vulnerability
• OVF

16. Cloud Security Alliance – Cloud Controls Matrix

Objectives covered by this section:

• CCM Controls
• Architectural Relevance
• CCM Domains
• Mapped Standards and Frameworks

Average Salary of Certificate of Cloud Security Knowledge (CCSK) Exam Certified Professionals

The average salary of a Certificate of Cloud Security Knowledge (CCSK) Exam Certified Professional is:

• Europe: 50,000 EURO
• India: 4,477,000 INR
• United State: 60,550 USD
• England: 45,000 POUND

NO.30 Which of the following leverages virtual network topologies to run more. smaller. and more isolated networks without incurring additional hardware costs that historically make such models prohibitive?

 VLANS

 Micro LANs

 Micro segmentation

 BitVLANS

Micro segmentation(also sometimes referred to as hyper segregation) leverages virtual network topologies to run more, smaller, and more isolated networks without incurring additional hardware costs that historically make such models prohibitive. Since the entire networks are defined in software without many of the traditional addressing issues, it is far more feasible to run these multiple, software- defined environments.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)

NO.31 Which of the following is a responsibility of Cloud customer?

 Image Asset Management

 Isolation

 Secure Virtualization Infrastructure

 Meta Structure

Image asset management. Cloud compute deployments are based on master images-be it a virtual machine, container, or other code-that are then run in the cloud. This is often highly automated and results in a larger number of images to base assets on, compared to traditional computing master images. Managing these-including which meet security requirements, where they can be deployed, and who has access to them-is an important security responsibility.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)

NO.32 Which of the following is NOT key Cloud computing characteristics?

 On Demand self service

 Metered pricing

 Metered servicing

 Broad Network Access

Often, this type of questions looks simple, but a confusion is created and you need to be careful while picking up the right options ln our case, metered pricing and metered servicing looks similar but Metered pricing is one of the characteristics of cloud computing.

NO.33 Code execution environments that run within an operating system. sharing and leveraging resources of that operating system is called :

 Sandbox

 Container

 Virtual Machine

 Instance

Containers are code execution environments that run within an operating system(for now), sharing and leveraging resources of that operating system. While a VM is a full abstraction of an operating system, a container is a constrained place to run segregated processes while still utilizing the kernel and other capabilities of the base 0S. Multiple containers can run on the same virtual machine or be implemented without the use of VMs at all and run directly on hardware.
Reference: CSA Security Guidelines V.4(reproduced here for the educational purpose)

NO.34 Which of the following very important consideration when securing access to the Management Plane?

 Remote Access VPN

 Least Privilege

 Super Administrator

 Service Administrator

Both providers and consumers should consistently only allow the least privilege required for users.
applications. and other management plane usage.
Reference: CSA Security Guidelines V.4(reproduced here for the educational purpose)

NO.35 Which of the following is a key component that allows programmatic management of the cloud?

 APIs

 Firewall

 API Gateway

 Control Plane

Application Programming Interfaces allow for programmatic management of the cloud. They are the glue that holds the cloud’s components together and enables their orchestration. Since not everyone wants to write programs to manage their cloud, web consoles provide visual interfaces. ln many cases web consoles merely use the same APIs you can access directly.
Reference: CSA Security Guidelines V.4 (reproduced here for the educational purpose)

NO.36 Which of the following functions maps to all the phases of Data security life cycle?

 Read/Access

 Process

 Store

 Destroy

Functions: There are three things we can do with a given datum:
. Read, View/read the data, including creating, copying, file transfers, dissemination, and other exchanges of information.
* Process. Perform a transaction on the data; update it; use it in a business processing transaction, etc.
. Store, Hold the data (in a file, database, etc.).

NO.37 Which of the following is an effective way of segregating different cloud networks and datacenters in a hybrid cloud environment?

 Virtual LANs

 Dedicated Hosting

 Virtual Private Networks

 Bastion Virtual Network

One emerging architecture for hybrid cloud connectivity is “bastion” or “transit” virtual networks:
. This scenario allows you to connect multiple, different cloud networks to a data center using a single hybrid connection. The cloud user builds a dedicated virtual network for the hybrid connection and then peers any other networks through the designated bastion network.
. Second-level networks connect to the data center through the bastion network, but since they aren’t peered to each other they can’t talk to each other and are effectively segregated. Also, you can deploy different security tools, firewall rulesets, and Access Control Lists in the bastion network to further protect traffic in and out of the hybrid connection.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)

NO.38 Lack of CPU or network bandwidth and intermittent access to provisioned resources are examples of which of the following cloud risk?

 Isolation failure

 Software vulnerabilities

 API vulnerabilities

 Resource Exhaustion

They are all examples of resource exhaustion

NO.39 Which one of the following is the key techniques to create cloud infrastructure?

 Data Classification

 Orchestration

 Orientation

 Automation

The key techniques to create a cloud are abstraction and orchestration. We abstract the resources from the underlying physical infrastructure to create our pools, and use orchestration(and automation)to coordinate carving out and delivering a set of resources from the pools to the consumers. As you will see, these two techniques create all the essential characteristics we use to define something as a
“cloud.”
Ref: CSA Security Guidelines V4.0

NO.40 “Capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms” Which of the following characterstics defines this

 0n-demand self-service

 Broad network access

 Resource pooling

 Rapid elasticity

NO.41 Which of the following is NOT part of Risk management process?

 Framing

 Dealing

 Responding

 Assessing

The risk-management process has four components
1. Framing risk
2. Assessing risk
3. Responding to risk
4. Monitoring risk

NO.42 In a cloud scenario. who is the data processor and who is the data controller?

 Cloud Service Provider is the data controller and its customer is the data processor

 Database admin is the data controller and application owner is the data processor

 Cloud Service Provider is the data processor and its customer is the data controller

 Neither cloud service provider nor customer is data processor or data controller.

The customer determines the ultimate purpose of the processing and decides on the outsourcing or the delegation of all or part of the concerned activities to external organizations. Therefore, the customer acts as a controller.
When the service provider supplies the means and the platform, acting on behalf of the customer, it is considered to be a data processor.

NO.43 Which of the following reports the cloud service provide normally share with customer WITHOUT any non-disclosure agreement and is in the public domain?

 SOC1 Type1

 SOC2 Type2

 SOC3

 SOC2 Type1

A Soc3 reports on the same information as a Soc2 report. The main difference between the two is that a Soc3 is intended fora general audience. These reports are shorter and do not include the same details as a Soc2 report, which is distributed to an informed audience of stakeholders. Due to their more general nature, Soc3 reports can be shared openly and posted on a company’s website with a seal indicating their compliance

NO.44 Use elastic servers when possible and move workloads to new instances.

 False

 True

NO.45 One of the primary benefits of the cloud is the ability to perform dynamic allocation of physical resources when required. The most common approach is a multi-tenant environment. However, it increases risk of disclosure of customer dat a. This can happen because of which of the following?

 Isolation Failure

 Increased DDoS

 No disaster recovery plan

 Tenancy termination

All resources allocated to a particular tenant should be “isolated” and protected to avoid disclosure of information to other tenants For example, when allocated storage is no longer needed IIS Security Considerations for Cloud Computing by a client it can be freely reallocated to another enterprise. ln that case, sensitive data could be disclosed if the storage has not been scrubbed thoroughly(e.g, using forensic software).

NO.46 The amount of risk that the leadership and stakeholders of an organization are willing to accept is know as:

 Risk Acceptance

 Residual Risk

 Risk Tolerance

 Risk Residual

Risk tolerance is the amount of risk that the leadership and stakeholders of an organization are willing to accept. It varies based on asset and you shouldn’t make a blanket risk decision about a particular provider; rather, assessments should align with the value and requirements of the assets Ref: Security Guidance v4.0 Copyright2017, Cloud Security Alliance(used for educational purpose here)

NO.47 ENISA: A reason for risk concerns of a cloud provider being acquired is:

 Arbitrary contract termination by acquiring company

 Resource isolation may fail

 Provider may change physical location

 Mass layoffs may occur

 Non-binding agreements put at risk

NO.48 Which of the following Standards is normally followed to manage Enterprise Risk?

 ISO 27005

 ISO 31000

 ISO 27001

 ISO 27032

ISO 31000 provides principles and guidelines to do Enterprise Risk Management.

NO.49 Exploitable bugs in programs that attackers can use to infiltrate a computer system for the purpose of stealing data, taking control of the system or disrupting service operations, are called:

 Threat Agents

 Vulnerbilities

 Threats

 Honepots

It’s a definition of System Vulnerability.

 Loading …

How much Certificate of Cloud Security Knowledge (CCSK) Exam Cost

The Certificate of Cloud Security Knowledge (CCSK) Exam costs USD 395 which includes two attempts for the candidates. In case of failure, each further attempt will cost USD 395. Candidates may incur other costs during the preparation phase of the exam like purchasing the CCSk exam dumps pdf and then practicing for the exam via the CCSK practice test.

Verified CCSK dumps Q&As – Pass Guarantee Exam Dumps Test Engine: https://www.actualpdf.com/CCSK_exam-dumps.html

         

Related Links: myportal.utt.edu.tt disqus.com myportal.utt.edu.tt myportal.utt.edu.tt www.stes.tyc.edu.tw www.stes.tyc.edu.tw