CCSK Cloud Architecture and Security Controls 2

Question 1

In the CSA Cloud Controls Matrix (CCM), what is the primary purpose of the control domains?

Accepted Answer

To provide security controls mapped to industry standards and cloud service models

Answer

The CCM provides a framework of security controls aligned to cloud service models and mapped to standards like ISO 27001, NIST, and PCI DSS.

Question 2

What is 'cloud bursting' and what security challenge does it introduce?

Accepted Answer

Dynamically extending workloads from private to public cloud; it creates data spillage risk

Answer

Cloud bursting moves workloads to public cloud under peak load, creating risk that sensitive data may leave the private environment without proper controls.

Question 3

Which of the following best describes a 'cloud broker' in the NIST cloud computing model?

Accepted Answer

An entity that manages use, performance, and delivery of cloud services between providers and consumers

Answer

A cloud broker acts as an intermediary who negotiates relationships and manages cloud services between providers and consumers.

Question 4

What security advantage does immutable infrastructure provide in cloud environments?

Accepted Answer

It reduces configuration drift and ensures consistency across deployments

Answer

Immutable infrastructure replaces rather than patches instances, preventing configuration drift and ensuring every deployment matches a known good state.

Question 5

In cloud security architecture, what is the function of a 'security group'?

Accepted Answer

A virtual firewall controlling inbound and outbound traffic to instances

Answer

Security groups act as virtual firewalls that control network traffic at the instance level in cloud environments like AWS and Azure.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK Cloud Architecture and Security Controls 2