CCSK Certificate of Cloud Security Knowledge 4

Question 1

Which cloud service model gives customers the LEAST control over the underlying infrastructure security?

Accepted Answer

SaaS (Software as a Service)

Answer

In SaaS, the provider manages everything from infrastructure to the application layer, leaving customers to control only their data and user access.

Question 2

What is the purpose of a 'Virtual Private Cloud' (VPC)?

Accepted Answer

To create an isolated, logically defined network segment within a public cloud

Answer

A VPC provides logical network isolation within a public cloud, letting customers define IP ranges, subnets, routing, and access controls in a private network environment.

Question 3

In cloud incident response, what challenge is MOST unique compared to traditional on-premises incident response?

Accepted Answer

Customers may have limited forensic access to underlying infrastructure and logs controlled by the provider

Answer

Cloud customers often cannot access physical hardware, hypervisor logs, or provider-side evidence, making forensic investigation dependent on what the provider exposes through APIs.

Question 4

What is 'infrastructure as code' (IaC) and what is its primary security benefit?

Accepted Answer

Defining infrastructure through machine-readable files enabling consistent, auditable, and repeatable deployments

Answer

IaC allows infrastructure to be defined in version-controlled code, enabling security review of configurations before deployment and ensuring consistent, drift-free environments.

Question 5

Which attack is MOST specific to cloud and virtualized environments, where a malicious workload escapes its isolated container to affect the host or neighboring workloads?

Accepted Answer

VM/container escape

Answer

VM or container escape exploits vulnerabilities in the hypervisor or container runtime to break isolation boundaries and access the host system or other tenants.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK Certificate of Cloud Security Knowledge 4