Cloud Security Alliance CCSK Real Exam Questions Test Engine Dumps Training With 112 Questions [Q17-Q41]

QUESTION 17
Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

QUESTION 18
Sending data to a provider’s storage over an API is likely as much more reliable and secure than setting up your own SFTP server on a VM in the same provider

QUESTION 19
Which of the following is NOT normally a method for detecting and preventing data migration into the cloud?

QUESTION 20
Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?

QUESTION 21
Which attack surfaces, if any, does virtualization technology introduce?

QUESTION 22
What type of information is contained in the Cloud Security Alliance’s Cloud Control Matrix?

QUESTION 23
Whose responsibility is to maintain Data Loss Prevention mechanisms in SaaS(Software as a Service) model ?

QUESTION 24
“Standards like the SSAE16 have a defined scope. which includes both what is assessed (e.g. which of the provider’s services) as well as which controls are assessed. A provider can thus “pass” an audit that doesn’t include any security controls. which isn’t overly useful for security and risk managers. ” True or False?

QUESTION 25
Which of the following is not an abuse or misuse of cloud services?

QUESTION 26
Database as a Service is an example of :

QUESTION 27
All of the following are type of access controls except:

QUESTION 28
Which of the following decouples the network control plane from the data plane and allows to abstract networking from the tradition a limitations of a LAN?

QUESTION 29
What are the primary security responsibilities of the cloud provider in compute virtualizations?

QUESTION 30
Ben was working on a project and hosted all its data on a public cloud. The project is now complete and he wants to remove the data Which of the following is best option for him in order to leave no remanence?

QUESTION 31
Who is responsible for infrastructure Security in Software as a Service(SaaS) service model?

QUESTION 32
What is a type of computing comparable to grid computing that relies on sharing computing resources rather than having local servers or personal devices to handle applications?

QUESTION 33
The basis for deciding which laws are most appropriate in a situation where conflicting laws exist. refers to:

QUESTION 34
Who is responsible for the safe custody, transport, data storage. and implementation of business rules in relation to the privacy?

QUESTION 35
Which of the following is true after your organization migrates the data to the cloud?

QUESTION 36
Which of the following authentication is most secured?

QUESTION 37
Which of the following is correct about Due Care & Due Diligence?

QUESTION 38
Operating System management is done by customer in which service model of cloud computing?

QUESTION 39
Metrics which govern the contractual obligations of cloud service are found in:

QUESTION 40
John said that he is looking for cloud service which is self-serviced and has a on-demand capacity. Which service model is he referring to?

QUESTION 41
Dynamic Application Security Testing (DAST) might be limited or require pre-testing permission from the provider.