CCSK Certificate of Cloud Security Knowledge 2

Question 1

Which CSA guidance domain focuses on ensuring that an organization's cloud usage aligns with its legal and regulatory obligations?

Accepted Answer

Compliance and Audit Management

Answer

Compliance and Audit Management addresses aligning cloud use with legal, regulatory, and contractual requirements and managing audit processes.

Question 2

In the shared responsibility model, which security control is ALWAYS the cloud customer's responsibility regardless of service model?

Accepted Answer

Identity and access management for their users

Answer

Customers always retain responsibility for managing their own users' identities and access permissions, regardless of whether the service is IaaS, PaaS, or SaaS.

Question 3

What is the primary purpose of a Cloud Access Security Broker (CASB)?

Accepted Answer

To enforce security policies between cloud service consumers and providers

Answer

A CASB sits between users and cloud services to enforce security policies, provide visibility, and control data movement.

Question 4

Which term describes the risk that a cloud provider's technical or business failure could disrupt a customer's operations?

Accepted Answer

Provider dependency risk

Answer

Provider dependency risk captures the exposure created when a customer relies on a cloud provider whose failure—technical or commercial—would impact the customer.

Question 5

In cloud security, what does the term 'elasticity' primarily refer to?

Accepted Answer

The ability to rapidly scale resources up or down to match demand

Answer

Elasticity is the cloud characteristic of dynamically provisioning and releasing resources to match workload demand, which has direct implications for security tooling and cost.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK Certificate of Cloud Security Knowledge 2