CSS Cloud Security & Infrastructure Protection 3

Question 1

Which framework was specifically designed to address cloud computing security controls?

Accepted Answer

CSA Cloud Controls Matrix (CCM)

Answer

The CSA Cloud Controls Matrix is a cybersecurity control framework developed by the Cloud Security Alliance specifically for cloud computing environments.

Question 2

What does FedRAMP primarily govern?

Accepted Answer

Security requirements for cloud services used by U.S. federal government agencies

Answer

FedRAMP (Federal Risk and Authorization Management Program) provides a standardized approach to security assessment and authorization for cloud services procured by U.S. federal agencies.

Question 3

Which principle best describes 'zero trust' architecture as applied to cloud environments?

Accepted Answer

Never implicitly trusting any user, device, or network segment regardless of location

Answer

Zero trust assumes no entity is inherently trustworthy and requires continuous verification of identity, device health, and authorization for every access request.

Question 4

What is a key security consideration when cloud services process data belonging to EU citizens?

Accepted Answer

GDPR compliance requirements including data subject rights and cross-border transfer restrictions

Answer

GDPR imposes obligations on any organization handling EU citizen data, including honoring data subject rights and restricting transfers of that data outside the European Economic Area.

Question 5

From a security perspective, what does a Service Level Agreement (SLA) with a cloud provider typically address?

Accepted Answer

Guaranteed uptime commitments, incident response timelines, and division of security responsibilities

Answer

SLAs establish measurable commitments for availability, incident notification windows, and clarify the boundary of security responsibilities between provider and customer.

(CSS) Certified Security Sentinel Practice Test

(CSS) Certified Security Sentinel Practice Test

CSS Cloud Security & Infrastructure Protection 3