CCSK Practice Exam Questions and Answers

A.  

Multi-tenancy

B.  

Nation-state boundaries

C.  

Measured service

D.  

Unlimited bandwidth

E.  

Hybrid clouds

A.  

Fully rely on cloud provider's security features

B.  

Cloud providers guarantee complete security compliance

C.  

Assume default settings are adequate for all applications

D.  

Customize additional security measures to address gaps

A.  

False

B.  

True

A.  

The Data Security Lifecycle has six stages, is strictly linear, and never varies.

B.  

The Data Security Lifecycle has six stages, can be non-linear, and varies in that some data may never pass through all stages.

C.  

The Data Security Lifecycle has five stages, is circular, and varies in that some data may never pass through all stages.

D.  

The Data Security Lifecycle has six stages, can be non-linear, and is distinct in that data must always pass through all phases.

E.  

The Data Security Lifecycle has five stages, can be non-linear, and is distinct in that data must always pass through all phases.

A.  

False

B.  

True

A.  

The provider’s computing resources are pooled to serve multiple consumers.

B.  

Internet-based CPUs are pooled to enable multi-threading.

C.  

The dedicated computing resources of each client are pooled together in a colocation facility.

D.  

Placing Internet (“cloud”) data centers near multiple sources of energy, such as hydroelectric dams.

E.  

None of the above.

A.  

More physical control over assets and processes.

B.  

Greater reliance on contracts, audits, and assessments due to lack of visibility or management.

C.  

Decreased requirement for proactive management of relationship and adherence to contracts.

D.  

Increased need, but reduction in costs, for managing risks accepted by the cloud provider.

E.  

None of the above.

A.  

Simplifies network design and maintenance

B.  

Enhances security by isolating workloads from each other

C.  

Increases the overall performance of network traffic

D.  

Reduces the need for encryption across the network

A.  

Adversarial attacks

B.  

DDoS attacks

C.  

Third-party services

D.  

Jailbreak attack

A.  

Requires short-term commitments and defers upfront costs

B.  

Automatic scaling and reduced operational overhead

C.  

Large initial configuration is not required

D.  

Full control over underlying server environments