Free Certificate of Cloud Security Knowledge Questions and Answers

Question 1

Scoping and review activities can be sped up by:

Accepted Answer

Engaging auditors with experience in the cloud space.

Answer

There is no need to pay for the auditor to be taught on the issue by hiring auditors with experience in the cloud domain. It should be noted that this is mentioned in domain 4 of the guideline (V4) with the phrase "Attempt to select auditors with experience in cloud computing," but does not explain why, as it did in the previous version of the guidance.

Question 2

Access Controls are the greatest solution. Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guidelines.

Accepted Answer

Access Controls

Answer

Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guideline.

Question 3

Which logical model layer is identified as the main difference between cloud and conventional computing?

Accepted Answer

Metastructure

Answer

The management plane components of the cloud metastructure are network-enabled and remotely accessible.

Question 4

Documents generated or maintained on the cloud have a greater burden of evidence in a court of law.

Accepted Answer

False

Answer

Documents should not be regarded as more or less acceptable or reliable just because they were generated or saved in the cloud. This is on page 52 of the Guidance (version 4).

Question 5

The Cloud Controls Matrix (CCM) may be used to evaluate a supplier of Security as a Service.

Accepted Answer

False

Answer

The statement is marked False because the Cloud Controls Matrix is a control framework for assessing the security of cloud computing providers generally, rather than the specific tool intended for evaluating a Security as a Service supplier. Provider assurance for such services is handled through related mechanisms (like the CSA STAR registry) rather than the CCM alone.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

Free Certificate of Cloud Security Knowledge Questions and Answers