[Mar-2022] Cloud Security Knowledge CCSK Exam Practice Dumps [Q153-Q177]

NO.153 What is the main driver for decision to deploy cloud solutions?

NO.154 Which of the following functions maps to all the phases of Data security life cycle?

NO.155 What is the process to determine any weaknesses in the application and the potential ingress, egress, and actors involved before the weakness is introduced to production?

NO.156 CCM: In the CCM tool, a _____________________ is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

NO.157 Which of the following is a responsibility of Cloud customer?

NO.158 How does running applications on distinct virtual networks and only connecting networks as needed help?

NO.159 When a cloud customer uploads PII to a cloud provider. who becomes ultimately responsible for the security of that PII?

NO.160 ln which service model. does cloud security provider has least responsibility?

NO.161 Which of the following very important consideration when securing access to the Management Plane?

NO.162 NIST defines five characteristics of cloud computing- Rapid Elasticity, Broad Network Access, 0n demand self-service, Metered Usage & Resource pooling. However, IS0/lEC17788 mentions one more characteristic in addition is those 5. Which of the following is that characterstic?

NO.163 Containers can be implemented without the use of VMs at all and run directly on hardware.

NO.164 Which of the following are two most effective ways of protection against data breaches in the cloud environment?

NO.165 Which of the following is NOT part of Risk management process?

NO.166 One of the key technologies that have made cloud computing viable is:

NO.167 Multi-tenancy and shared resources are defining characteristics of cloud computing. However, mechanisms separating storage, memory, routing may fail due to several reasons. What risk are we talking about?

NO.168 Which of the following describes the cloud security reference architecture?

NO.169 Use elastic servers when possible and move workloads to new instances.

NO.170 Cloud customer can do vulnerability assessment of their whole infrastructure on cloud just like they conduct vulnerbility assessment of their traditional infrastructure.

NO.171 Which of the following is not part of STRIDE model?

NO.172 Which form of storage has features are typically minimal. allowing you to only store, retrieve, copy and delete files as well as the ability to control which users can undertake these actions?

NO.173 Which of the following Standards is normally followed to manage Enterprise Risk?

NO.174 The individual’s right to have data(PII) removed from a entity/ provider at anytime per their request. is known as:

NO.175 Which of the following is true when we talk about compliance inheritance?

NO.176 The entity that has the primary relationship with an individual from whom his/her PII is collected is known as:

NO.177 An adversary stole1 million username and passwords of Pass4test LLCs customers. They took advantage of a security vulnerability in the publically accessible application hosted on the cloud. This is an example of: