Free Certificate of Cloud Security Knowledge Questions and Answers — Questions and Answers
Question 1: Scoping and review activities can be sped up by:
- Obtaining a letter of attestation
- Engaging auditors with experience in the cloud space. (Correct answer)
- Relying on certifications instead of audits
- Outsourcing audits to a "Big 5" auditing shop
Correct answer: Engaging auditors with experience in the cloud space.
There is no need to pay for the auditor to be taught on the issue by hiring auditors with experience in the cloud domain. It should be noted that this is mentioned in domain 4 of the guideline (V4) with the phrase "Attempt to select auditors with experience in cloud computing," but does not explain why, as it did in the previous version of the guidance.
Question 2: Access Controls are the greatest solution. Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guidelines.
- Managing data location/residency
- Backups and business continuity
- Access Controls (Correct answer)
- Ensuring compliance, including audit artifacts (logs, configurations)
Correct answer: Access Controls
Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guideline.
Question 3: Which logical model layer is identified as the main difference between cloud and conventional computing?
- Infostructure
- Infrastructure
- Applistructure
- Metastructure (Correct answer)
Correct answer: Metastructure
The management plane components of the cloud metastructure are network-enabled and remotely accessible.
Question 4: Documents generated or maintained on the cloud have a greater burden of evidence in a court of law.
- False (Correct answer)
- True
Correct answer: False
Documents should not be regarded as more or less acceptable or reliable just because they were generated or saved in the cloud. This is on page 52 of the Guidance (version 4).
Question 5: The Cloud Controls Matrix (CCM) may be used to evaluate a supplier of Security as a Service.
- False (Correct answer)
- True
Correct answer: False
The statement is marked False because the Cloud Controls Matrix is a control framework for assessing the security of cloud computing providers generally, rather than the specific tool intended for evaluating a Security as a Service supplier. Provider assurance for such services is handled through related mechanisms (like the CSA STAR registry) rather than the CCM alone.
Question 6: Which key feature allows increasing use of immutable infrastructure? (Select the best solution)
- Elasticity (Correct answer)
- Measured service
- Broad network access
- On-Demand self-service
Correct answer: Elasticity
Although on-demand self-service is important in allowing elasticity, the advice adds on page 109, "Elasticity enables greater use of immutable infrastructure."
Question 7: What is the CSA phrase for something assigned to an object within a specific namespace?
- Identifier
- Authorizer
- Identity (Correct answer)
- Persona
Correct answer: Identity
An Identifier is the means through which one's identity is declared. Persona is identity plus contextual characteristics. The CSA does not use the name Authorizer as SAML is a federation standard.
Free Certificate of Cloud Security Knowledge Questions and Answers
Scoping and review activities can be sped up by: