CCSK Practice Exam Questions and Answers

A.  

Database encryption

B.  

Media encryption

C.  

Asymmetric encryption

D.  

Object encryption

E.  

Client/application encryption

A.  

Mappings to well-known standards and frameworks

B.  

Service Provider or Tenant/Consumer

C.  

Physical, Network, Compute, Storage, Application or Data

D.  

SaaS, PaaS or IaaS

A.  

The on demand self-service nature of cloud computing environments.

B.  

Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.

C.  

The possibility of data crossing geographic or jurisdictional boundaries.

D.  

Object-based storage in a private cloud.

E.  

The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.

A.  

Arbitrary contract termination by acquiring company

B.  

Resource isolation may fail

C.  

Provider may change physical location

D.  

Mass layoffs may occur

E.  

Non-binding agreements put at risk

A.  

Planned Outages

B.  

Resiliency Planning

C.  

Expected Engineering

D.  

Chaos Engineering

E.  

Organized Downtime

A.  

The metrics defining the service level required to achieve regulatory objectives.

B.  

The duration of time that a security violation can occur before the client begins assessing regulatory fines.

C.  

The cost per incident for security breaches of regulated information.

D.  

The regulations that are pertinent to the contract and how to circumvent them.

E.  

The type of security software which meets regulations and the number of licenses that will be needed.

A.  

Legal Issues: Contracts and Electronic Discovery

B.  

Infrastructure Security

C.  

Compliance and Audit Management

D.  

Information Governance

E.  

Governance and Enterprise Risk Management

A.  

A library of data definitions

B.  

A group of entities which have decided to exist together in a single

cloud

C.  

Identities which share similar attributes

D.  

Several countries which have agreed to define their identities with

similar attributes

E.  

The connection of one identity repository to another

A.  

The physical location of the data and how it is accessed

B.  

The fragmentation and encryption algorithms employed

C.  

The language of the data and how it affects the user

D.  

The implications of storing complex information on simple storage systems

E.  

The actual size of the data and the storage format

A.  

Platform-as-a-service (PaaS)

B.  

Desktop-as-a-service (DaaS)

C.  

Infrastructure-as-a-service (IaaS)

D.  

Identity-as-a-service (IDaaS)

E.  

Software-as-a-service (SaaS)