(CSA) Basic Flashcards
7 cards from real CCSK practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 (CSA) Basic flashcards as text
According to CSA, which cloud deployment model provides infrastructure exclusively for a single organization and may be managed on-premises or by a third party?
Answer: Private cloud
A private cloud is dedicated to a single organization and can be hosted on-premises or externally, offering greater control over data and security.
In the CSA Shared Responsibility Model, which security responsibility does the cloud customer always retain regardless of service model?
Answer: Data classification and accountability
Customers always retain responsibility for data classification and accountability regardless of whether they use IaaS, PaaS, or SaaS.
What does the CSA define as the 'control plane' in cloud computing?
Answer: The management layer that allows users to configure and control cloud resources
The control plane is the management layer through which users provision, configure, and orchestrate cloud resources and services.
Which CSA Guidance domain focuses on how organizations plan and manage the processes, procedures, and governance of cloud security?
Answer: Governance and Enterprise Risk Management
The Governance and Enterprise Risk Management domain covers organizational policies, risk management frameworks, and cloud security strategy.
According to CSA, what is 'cloud bursting'?
Answer: Automatically scaling workloads from a private cloud into a public cloud during peak demand
Cloud bursting is a hybrid cloud configuration that allows workloads to move from private cloud to public cloud when demand exceeds private capacity.
In CSA terminology, what is a 'metastructure'?
Answer: The protocols and mechanisms that provide the interface between the infrastructure and other layers
The metastructure is the layer of protocols and mechanisms—like APIs—that bridges cloud infrastructure with the services built on top of it.
Which statement best describes the CSA concept of 'segregation of duties' in cloud IAM?
Answer: Dividing critical tasks among multiple individuals so no single person controls an entire process
Segregation of duties divides responsibilities across multiple individuals to reduce fraud risk and prevent any single person from having unchecked control.