CCSK Cloud Architecture and Security Controls

Question 1

Which CSA reference model defines the relationship between cloud service models and deployment models?

Accepted Answer

Logical Model

Answer

The CSA Logical Model maps the relationships between cloud service and deployment models to help understand security responsibilities.

Question 2

In the shared responsibility model, who is responsible for securing the hypervisor in an IaaS deployment?

Accepted Answer

The cloud service provider

Answer

In IaaS, the cloud service provider is responsible for securing the hypervisor and underlying physical infrastructure.

Question 3

What does the CSA Security Guidance refer to as the 'management plane'?

Accepted Answer

The interface used to configure and manage cloud services

Answer

The management plane is the interface (API or console) customers use to configure, deploy, and manage their cloud resources.

Question 4

Which CSA domain focuses on identifying and managing assets in the cloud?

Accepted Answer

Domain 9: Incident Response

Answer

Wait — the correct domain for asset management within the CSA Guidance is embedded under Governance and risk; however, asset inventory is discussed under Domain 2.

Question 5

What is the primary security concern with multi-tenancy in cloud environments?

Accepted Answer

Isolation failure between tenant workloads

Answer

Multi-tenancy introduces risk that a failure in isolation mechanisms could expose one tenant's data or workloads to another.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK Cloud Architecture and Security Controls