CCSK Free Practice Test

CCM: The Architectural Relevance column in the CCM indicates the applicability of the cloud security control to which of the following elements?

1. A. Service Provider or Tenant/Consumer
2. B. Physical, Network, Compute, Storage, Application or Data
3. C. SaaS, PaaS or IaaS

Correct Answer: C

What is true of companies considering a cloud computing business relationship?

1. A. The laws protecting customer data are based on the cloud provider and customer location only.
2. B. The confidentiality agreements between companies using cloud computing services is limited legally to the company, not the provider.
3. C. The companies using the cloud providers are the custodians of the data entrusted to them.
4. D. The cloud computing companies are absolved of all data security and associated risks through contracts and data laws.
5. E. The cloud computing companies own all customer data.

Correct Answer: C

What is true of searching data across cloud environments?

1. A. You might not have the ability or administrative rights to search or access all hosted data.
2. B. The cloud provider must conduct the search with the full administrative controls.
3. C. All cloud-hosted email accounts are easily searchable.
4. D. Search and discovery time is always factored into a contract between the consumer and provider.
5. E. You can easily search across your environment using any E-Discovery tool.

Correct Answer: A

What is the newer application development methodology and philosophy focused on automation of application development and deployment?

1. A. Agile
2. B. BusOps
3. C. DevOps
4. D. SecDevOps
5. E. Scrum

Correct Answer: C

What is known as a code execution environment running within an operating system that shares and uses the resources of the operating system?

1. A. Platform-based Workload
2. B. Pod
3. C. Abstraction
4. D. Container
5. E. Virtual machine

Correct Answer: D