Practice Test GeeksCCSK - Certificate of Cloud Security Knowledge Practice Test
← All CCSK Flashcard Decks

Certificate of Cloud Security Knowledge Flashcards

7 cards from real CCSK practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Certificate of Cloud Security Knowledge flashcards as text

  1. Scoping and review activities can be sped up by:

    Answer: Engaging auditors with experience in the cloud space.

    There is no need to pay for the auditor to be taught on the issue by hiring auditors with experience in the cloud domain. It should be noted that this is mentioned in domain 4 of the guideline (V4) with the phrase "Attempt to select auditors with experience in cloud computing," but does not explain why, as it did in the previous version of the guidance.

  2. Access Controls are the greatest solution. Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guidelines.

    Answer: Access Controls

    Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guideline.

  3. Which logical model layer is identified as the main difference between cloud and conventional computing?

    Answer: Metastructure

    The management plane components of the cloud metastructure are network-enabled and remotely accessible.

  4. Documents generated or maintained on the cloud have a greater burden of evidence in a court of law.

    Answer: False

    Documents should not be regarded as more or less acceptable or reliable just because they were generated or saved in the cloud. This is on page 52 of the Guidance (version 4).

  5. The Cloud Controls Matrix (CCM) may be used to evaluate a supplier of Security as a Service.

    Answer: False

    The statement is marked False because the Cloud Controls Matrix is a control framework for assessing the security of cloud computing providers generally, rather than the specific tool intended for evaluating a Security as a Service supplier. Provider assurance for such services is handled through related mechanisms (like the CSA STAR registry) rather than the CCM alone.

  6. Which key feature allows increasing use of immutable infrastructure? (Select the best solution)

    Answer: Elasticity

    Although on-demand self-service is important in allowing elasticity, the advice adds on page 109, "Elasticity enables greater use of immutable infrastructure."

  7. What is the CSA phrase for something assigned to an object within a specific namespace?

    Answer: Identity

    An Identifier is the means through which one's identity is declared. Persona is identity plus contextual characteristics. The CSA does not use the name Authorizer as SAML is a federation standard.