CCP CASB & Cloud Security Posture 2

Question 1

Which CASB deployment mode inspects traffic by sitting inline between users and cloud services in real time?

Accepted Answer

Forward proxy mode

Answer

Forward proxy mode intercepts all cloud-bound traffic inline, enabling real-time inspection and control before requests reach the cloud service.

Question 2

A CSPM tool flags a misconfigured S3 bucket as 'publicly readable.' What is the FIRST remediation step?

Accepted Answer

Remove public access permissions and audit bucket contents

Answer

Removing public access permissions stops exposure immediately, while auditing contents determines if a data breach notification is required.

Question 3

Which cloud security concept ensures that the permissions granted to an identity are limited to only what is required for its tasks?

Accepted Answer

Principle of least privilege

Answer

The principle of least privilege restricts identities to the minimum permissions needed, reducing the blast radius of credential compromise.

Question 4

An organization wants to prevent users from uploading sensitive files to personal cloud storage accounts while allowing corporate accounts. Which CASB feature best addresses this?

Accepted Answer

Tenant restriction

Answer

Tenant restriction enforces access only to approved corporate tenants of a cloud service, blocking personal account usage on managed devices.

Question 5

In the shared responsibility model for SaaS, which layer is the customer always responsible for securing?

Accepted Answer

User access and data

Answer

In SaaS, the provider manages infrastructure through application code; the customer retains responsibility for user access controls and the data they store.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP CASB & Cloud Security Posture 2