CCSK (CSA) Basic 3

Question 1

According to CSA, what is the primary purpose of a Cloud Access Security Broker (CASB)?

Accepted Answer

To act as an intermediary enforcing security policies between cloud users and cloud services

Answer

A CASB sits between cloud consumers and providers to enforce security policies such as visibility, compliance, data security, and threat protection.

Question 2

What does CSA identify as a key risk of 'vendor lock-in' in cloud computing?

Accepted Answer

Difficulty migrating workloads due to proprietary technologies and data formats

Answer

Vendor lock-in risk arises when proprietary APIs, data formats, or services make it costly or technically challenging to move to another provider.

Question 3

In the CSA Cloud Controls Matrix (CCM), what is the primary purpose of the tool?

Accepted Answer

To provide a security controls framework specifically designed for cloud environments

Answer

The CCM provides a detailed controls framework aligned to cloud security domains, helping organizations assess and implement appropriate security measures.

Question 4

According to CSA, which technique best protects against SQL injection attacks in cloud-hosted applications?

Accepted Answer

Using parameterized queries and input validation

Answer

Parameterized queries prevent attackers from injecting malicious SQL by treating user input as data rather than executable code.

Question 5

What is the CSA-recommended approach for managing secrets (API keys, passwords) in cloud-native applications?

Accepted Answer

Store secrets in a dedicated secrets management service with strict access controls

Answer

Secrets management services (such as HashiCorp Vault or cloud-native equivalents) centralize secret storage with auditing, rotation, and least-privilege access.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK (CSA) Basic 3