CISSP CISSP Cloud Security 2

Question 1

Which framework provides a comprehensive set of cloud security controls aligned with ISO 27001?

Accepted Answer

CSA Cloud Controls Matrix (CCM)

Answer

The CSA Cloud Controls Matrix maps cloud-specific controls to ISO 27001 and other frameworks to guide cloud security assessments.

Question 2

What is the primary purpose of a Cloud Access Security Broker (CASB)?

Accepted Answer

To enforce security policies between cloud service users and providers

Answer

A CASB sits between users and cloud services to enforce visibility, compliance, data security, and threat protection policies.

Question 3

In a SaaS model, who is responsible for patching the application software?

Accepted Answer

The cloud service provider

Answer

In SaaS, the cloud provider manages and patches the application; the customer only manages their data and user access.

Question 4

What cloud data security technique ensures that even if the provider is compromised, customer data remains unreadable?

Accepted Answer

Client-side encryption with customer-managed keys

Answer

Encrypting data client-side before upload with customer-managed keys means the provider never possesses the decryption key.

Question 5

Which concept describes the risk that cloud data may be subject to the laws of the country where the data center resides?

Accepted Answer

Data sovereignty

Answer

Data sovereignty means data stored in a foreign jurisdiction may be subject to that country's laws, including government access demands.

CISSP - Certified Information Systems Security Professional Practice Test