CSC Cloud Security Compliance 2

Question 1

Under the AWS Shared Responsibility Model, which security control is always the customer's responsibility regardless of the service type used?

Accepted Answer

Identity and access management for user accounts

Answer

IAM for user accounts is always the customer's responsibility across all AWS service types (IaaS, PaaS, SaaS).

Question 2

Which cloud security framework specifically addresses controls for cloud service providers and was developed by the Cloud Security Alliance?

Accepted Answer

Cloud Controls Matrix (CCM)

Answer

The Cloud Security Alliance's Cloud Controls Matrix (CCM) is specifically designed for cloud environments and maps to multiple compliance frameworks.

Question 3

A company stores PHI in a cloud database. Under HIPAA, which document must be executed with the cloud provider before any PHI is stored?

Accepted Answer

Business Associate Agreement (BAA)

Answer

HIPAA requires a Business Associate Agreement (BAA) with any vendor that creates, receives, maintains, or transmits PHI on behalf of a covered entity.

Question 4

What is the primary purpose of a Cloud Access Security Broker (CASB)?

Accepted Answer

To enforce security policies between cloud users and cloud service providers

Answer

A CASB acts as an intermediary that enforces security, compliance, and governance policies for cloud service usage.

Question 5

An organization subject to PCI DSS uses a cloud provider that has a PCI DSS AOC (Attestation of Compliance). What does this mean for the organization's compliance posture?

Accepted Answer

The cloud provider's in-scope infrastructure satisfies certain PCI DSS requirements, but the customer must still address their own controls

Answer

A provider's AOC covers only their portion of the shared responsibility; customers must still implement and validate their own controls.

(CSC) Cybersecurity Compliance Certification Practice Test

(CSC) Cybersecurity Compliance Certification Practice Test

CSC Cloud Security Compliance 2