CCSK Cloud Architecture and Security Controls 3

Question 1

What is the significance of the 'trust boundary' concept in CCSK cloud security architecture?

Accepted Answer

It marks the perimeter where security responsibilities shift between parties

Answer

Trust boundaries define where one party's security responsibility ends and another's begins, critical for understanding the shared responsibility model.

Question 2

Which of the following is a key risk introduced by 'shadow IT' in cloud environments?

Accepted Answer

Unauthorized cloud services operating outside security controls

Answer

Shadow IT creates security blind spots because unauthorized services bypass established security policies, monitoring, and compliance controls.

Question 3

What does the CSA recommend as a compensating control when a cloud provider cannot supply audit logs?

Accepted Answer

Deploy a third-party SIEM to capture available telemetry

Answer

When provider audit logs are limited, deploying a SIEM to collect available telemetry compensates for the logging gap.

Question 4

In CCSK, what is meant by 'portability' as a cloud characteristic?

Accepted Answer

The ability to move workloads or data between cloud providers without proprietary lock-in

Answer

Portability refers to moving applications and data between cloud providers with minimal friction, reducing vendor lock-in risk.

Question 5

Which CSA domain covers the security implications of cloud APIs?

Accepted Answer

Domain 10: Application Security

Answer

Domain 10 (Application Security) covers securing cloud APIs, including authentication, input validation, and API gateway controls.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK Cloud Architecture and Security Controls 3