CCSK Cloud Architecture and Security Controls

Question 1

Which CSA reference model defines the relationship between cloud service models and deployment models?

Accepted Answer

Logical Model

Answer

Cloud Cube Model

Answer

Cloud Controls Matrix

Answer

Trust Zones Framework

Question 2

In the shared responsibility model, who is responsible for securing the hypervisor in an IaaS deployment?

Accepted Answer

The cloud service provider

Answer

The customer

Answer

A third-party auditor

Answer

A shared responsibility between customer and provider

Question 3

What does the CSA Security Guidance refer to as the 'management plane'?

Accepted Answer

The interface used to configure and manage cloud services

Answer

The physical data center network

Answer

The encryption layer between cloud and on-premises

Answer

The layer that handles VM scheduling

Question 4

Which CSA domain focuses on identifying and managing assets in the cloud?

Accepted Answer

Domain 9: Incident Response

Answer

Domain 3: Legal Issues, Contracts and eDiscovery

Answer

Domain 2: Governance and Enterprise Risk Management

Answer

Domain 8: Virtualization and Containers

Question 5

What is the primary security concern with multi-tenancy in cloud environments?

Accepted Answer

Isolation failure between tenant workloads

Answer

Increased hardware cost

Answer

Lack of encryption at rest

Answer

Difficulty provisioning resources quickly

Question 6

Which security architecture principle is most critical when designing cloud workloads according to CCSK?

Accepted Answer

Defense in depth

Answer

Security by obscurity

Answer

Perimeter-based security

Answer

Single-layer encryption