Free CCSK – Certificate of Cloud Security Knowledge (v4.0) Practice Test Question

Select an option, then click Submit answer.

• ○

  Platform-as-a-service (PaaS)
  

• ○

  Desktop-as-a-service (DaaS)
  

• ○

  Infrastructure-as-a-service (IaaS)
  

• ○

  Identity-as-a-service (IDaaS)
  

• ○

  Software-as-a-service (SaaS)
  
  
  

Select an option, then click Submit answer.

• ○

  You might not have the ability or administrative rights to search or access all hosted data.

• ○

  The cloud provider must conduct the search with the full administrative controls.
  

• ○

  All cloud-hosted email accounts are easily searchable.
  

• ○

  Search and discovery time is always factored into a contract between the consumer and provider.
  

• ○

  You can easily search across your environment using any E-Discovery tool.
  
  
  

Select an option, then click Submit answer.

• ○

  Software Development Kits (SDKs)

• ○

  Resource Description Framework (RDF)

• ○

  Extensible Markup Language (XML)

• ○

  Application Binary Interface (ABI)

• ○

  Application Programming Interface (API)
  

Select an option, then click Submit answer.

• ○

  The cloud consumer
  

• ○

  The majority is covered by the consumer

• ○

  It depends on the agreement
  

• ○

  The responsibility is split equally
  

• ○

  The cloud provider
  
  
  

Select an option, then click Submit answer.

• ○

  Administrative access

• ○

  Management plane

• ○

  Identity and Access Management

• ○

  Single sign-on

• ○

  Cloud dashboard

Select an option, then click Submit answer.

• ○

  Improper management of VM instances, causing customer VMs to be commingled with other customer systems.
  

• ○

  Looping within virtualized routing systems.
  

• ○

  Lack of vulnerability management standards.
  

• ○

  Using a compromised VM to exploit a hypervisor, used to take control of other VMs.
  

• ○

  Instability in VM patch management causing VM routing errors.
  
  

Select an option, then click Submit answer.

• ○

  Enforce isolation and maintain a secure virtualization infrastructure

• ○

  Monitor and log workloads and configure the security settings

• ○

  Enforce isolation and configure the security settings

• ○

  Maintain a secure virtualization infrastructure and configure the security settings

• ○

  Enforce isolation and monitor and log workloads

Select an option, then click Submit answer.

• ○

  Code Review

• ○

  Static Application Security Testing (SAST)

• ○

  Unit Testing

• ○

  Functional Testing

• ○

  Dynamic Application Security Testing (DAST)

Select an option, then click Submit answer.

• ○

  Lack of visibility

• ○

  Deployment flexibility

• ○

  Scaling and costs

• ○

  Intelligence sharing

• ○

  Insulation of clients

Select an option, then click Submit answer.

• ○

  The CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls. This approach will save time.
  

• ○

  The CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered as a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls thoroughly. This approach saves time while being able to assess the company’s overall security posture in an efficient manner.
  

• ○

  The CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the security posture of their cloud service against each and every control in the CCM. This approach will allow a thorough assessment of the security posture.