CCSK (CSA) Basic 4

Question 1

According to CSA, what distinguishes 'security as a service' (SecaaS) from traditional security products?

Accepted Answer

Security capabilities are delivered via cloud subscription rather than deployed on-premises

Answer

SecaaS delivers security functions—such as identity management, SIEM, or vulnerability scanning—as cloud-based subscription services without on-premises hardware.

Question 2

In CSA's Egress Monitoring guidance, what is the main goal of monitoring outbound cloud traffic?

Accepted Answer

To detect data exfiltration and unauthorized transmission of sensitive data

Answer

Egress monitoring focuses on detecting when sensitive data leaves cloud environments without authorization, which is a key indicator of a breach.

Question 3

What is the purpose of 'object storage' in cloud environments, according to CSA infrastructure guidance?

Accepted Answer

To store unstructured data as discrete objects with associated metadata, accessed via APIs

Answer

Object storage stores unstructured data (files, images, logs) as objects with metadata, accessed through REST APIs, making it highly scalable and durable.

Question 4

According to CSA, which is the most effective control for preventing unauthorized lateral movement after an initial cloud account compromise?

Accepted Answer

Implementing micro-segmentation and least-privilege network policies

Answer

Micro-segmentation limits blast radius by restricting east-west traffic so a compromised workload cannot freely access other resources in the environment.

Question 5

In CSA Guidance, what is 'immutable infrastructure'?

Accepted Answer

Cloud resources that are replaced rather than modified when changes are needed

Answer

Immutable infrastructure means servers and components are never modified after deployment; instead, new versions replace old ones, reducing configuration drift and attack surface.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK (CSA) Basic 4