← All CCSK Flashcard Decks

(CSA) Basic Flashcards

7 cards from real CCSK practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 (CSA) Basic flashcards as text
  1. According to CSA, which cloud deployment model provides infrastructure exclusively for a single organization and may be managed on-premises or by a third party?

    Answer: Private cloud

    A private cloud is dedicated to a single organization and can be hosted on-premises or externally, offering greater control over data and security.

  2. In the CSA Shared Responsibility Model, which security responsibility does the cloud customer always retain regardless of service model?

    Answer: Data classification and accountability

    Customers always retain responsibility for data classification and accountability regardless of whether they use IaaS, PaaS, or SaaS.

  3. What does the CSA define as the 'control plane' in cloud computing?

    Answer: The management layer that allows users to configure and control cloud resources

    The control plane is the management layer through which users provision, configure, and orchestrate cloud resources and services.

  4. Which CSA Guidance domain focuses on how organizations plan and manage the processes, procedures, and governance of cloud security?

    Answer: Governance and Enterprise Risk Management

    The Governance and Enterprise Risk Management domain covers organizational policies, risk management frameworks, and cloud security strategy.

  5. According to CSA, what is 'cloud bursting'?

    Answer: Automatically scaling workloads from a private cloud into a public cloud during peak demand

    Cloud bursting is a hybrid cloud configuration that allows workloads to move from private cloud to public cloud when demand exceeds private capacity.

  6. In CSA terminology, what is a 'metastructure'?

    Answer: The protocols and mechanisms that provide the interface between the infrastructure and other layers

    The metastructure is the layer of protocols and mechanisms—like APIs—that bridges cloud infrastructure with the services built on top of it.

  7. Which statement best describes the CSA concept of 'segregation of duties' in cloud IAM?

    Answer: Dividing critical tasks among multiple individuals so no single person controls an entire process

    Segregation of duties divides responsibilities across multiple individuals to reduce fraud risk and prevent any single person from having unchecked control.