CCSK (CSA) Basic 5

Question 1

In CSA's guidance on Incident Response, what is the recommended first step when a cloud security incident is detected?

Accepted Answer

Contain the incident to prevent further damage while preserving forensic evidence

Answer

Containment is the priority to limit damage, while evidence preservation ensures effective investigation and potential legal action.

Question 2

What does CSA define as 'tenant isolation' in multi-tenant cloud environments?

Accepted Answer

Logical and technical controls ensuring one tenant cannot access another tenant's data or resources

Answer

Tenant isolation uses logical controls—such as virtualization, namespaces, and access policies—to ensure tenants are separated even on shared infrastructure.

Question 3

According to CSA, what is the primary security concern with 'serverless computing' architectures?

Accepted Answer

The expanded attack surface from numerous functions and increased reliance on third-party dependencies

Answer

Serverless increases the number of deployed functions and dependencies, expanding the attack surface while requiring careful input validation and least-privilege IAM policies.

Question 4

In CSA's framework, what is the difference between 'data masking' and 'tokenization'?

Accepted Answer

Data masking obscures data for display purposes while tokenization replaces sensitive data with a non-sensitive substitute token

Answer

Data masking hides data for display/testing, while tokenization replaces sensitive values with tokens that can be mapped back via a secure token vault.

Question 5

According to CSA, what role does a Security Information and Event Management (SIEM) system play in cloud environments?

Accepted Answer

It aggregates and correlates logs and events from cloud services to detect and investigate threats

Answer

A SIEM collects, correlates, and analyzes log data from across cloud environments to identify anomalies, threats, and compliance violations.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK (CSA) Basic 5