CISSP CISSP Cloud Security 2

Question 1

Which framework provides a comprehensive set of cloud security controls aligned with ISO 27001?

Accepted Answer

CSA Cloud Controls Matrix (CCM)

Answer

COBIT

Answer

ITIL

Answer

SOC 2

Question 2

What is the primary purpose of a Cloud Access Security Broker (CASB)?

Accepted Answer

To enforce security policies between cloud service users and providers

Answer

To replace the organization's firewall

Answer

To encrypt cloud storage at rest

Answer

To conduct penetration testing on cloud infrastructure

Question 3

In a SaaS model, who is responsible for patching the application software?

Accepted Answer

The cloud service provider

Answer

The end user

Answer

The cloud customer's IT team

Answer

A third-party managed service

Question 4

What cloud data security technique ensures that even if the provider is compromised, customer data remains unreadable?

Accepted Answer

Client-side encryption with customer-managed keys

Answer

Data masking

Answer

TLS in transit

Answer

Access control lists

Question 5

Which concept describes the risk that cloud data may be subject to the laws of the country where the data center resides?

Accepted Answer

Data sovereignty

Answer

Data portability

Answer

Data classification

Answer

Data minimization

Question 6

What is the purpose of a right-to-audit clause in a cloud service contract?

Accepted Answer

To grant the customer the ability to inspect provider security controls

Answer

To allow the provider to audit customer usage

Answer

To mandate annual penetration testing by the provider

Answer

To enforce SLA compliance penalties