Certificate of Cloud Security Knowledge CCSK Exam Dumps

1. All cloud services utilize virtualization technologies.

2. If there are gaps in network logging data, what can you do?

3. CCM: In the CCM tool, a _____________________ is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

4. Who is responsible for the security of the physical infrastructure and virtualization platform?

5. What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?

6. Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?

7. CCM: The following list of controls belong to which domain of the CCM?

GRM 06 C Policy

GRM 07 C Policy Enforcement

GRM 08 C Policy Impact on Risk Assessments

GRM 09 C Policy Reviews

GRM 10 C Risk Assessments

GRM 11 C Risk Management Framework

8. Which attack surfaces, if any, does virtualization technology introduce?

9. APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

10. Which of the following is NOT a cloud computing characteristic that impacts incidence response?

11. Big data includes high volume, high variety, and high velocity.

12. CCM: A hypothetical company called: “Health4Sure” is located in the United States and provides cloud based services for tracking patient health. The company is compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so that they will be able to present this document to potential clients.

Which of the following approach would be most suitable to assess the overall security posture of Health4Sure’s cloud service?

13. A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?

14. Cloud applications can use virtual networks and other structures, for hyper-segregated environments.

15. Your cloud and on-premises infrastructures should always use the same network address ranges.