CCSK Certificate of Cloud Security Knowledge (v4.0) Questions and Answers

Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

Maintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.

Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.

Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.

Both B and D.

Management plane

Intrusion detection options

Secondary authentication factors

Network access points

Mobile security configuration options

Discovery

Custody

Subpoena

Risk Assessment

Scope

Conceptual models or frameworks

Design patterns

Controls models or frameworks

Reference architectures

Cloud Controls Matrix (CCM)

Building and properly configuring a secure network infrastructure

Configuring second factor authentication across the network

Properly configuring the deployment of the virtual network, especially the firewalls

Properly configuring the deployment of the virtual network, except the firewalls

Providing as many API endpoints as possible for custom access and configurations

Nothing.

It depends on how the automation is configured.

Changes made in production are overwritten by the next code or template change.

Changes made in test are overwritten by the next code or template change.

Changes made in production are untouched by the next code or template change.

It requires distinct access controls

It manages resource pools for cloud consumers

It has distinct functions from other networks

It manages the traffic between other networks

It requires unique security

False

True

Platform-based Workload

Pod

Abstraction

Container

Virtual machine

Public

PaaS

Private

IaaS

Hybrid

False

True

Multiple copies in different locations

Drives are backed up, swapped, and archived constantly

Full back ups weekly

Data loss is unavoidable with drive failures

Incremental backups daily

The development of a routine that covers all necessary security measures.

The diligent habits of good security practices and recording of the same.

The timely and efficient filing of security reports.

The awareness and adherence to obligations, including the assessment and prioritization of corrective actions deemed necessary and appropriate.

The process of completing all forms and paperwork necessary to develop a defensible paper trail.