CCSK Free Practice Test

ENISA: Lock-in is ranked as a high risk in ENISA research, a key underlying vulnerability causing lock in is:

1. A. Lack of completeness and transparency in terms of use
2. B. Lack of information on jurisdictions
3. C. No source escrow agreement
4. D. Unclear asset ownership
5. E. Audit or certification not available to customers

Correct Answer: A

CCM: A hypothetical start-up company called "ABC" provides a cloud based IT management solution. They are growing rapidly and therefore need to put controls in place in order to manage any changes in
their production environment. Which of the following Change Control & Configuration Management production environment specific control should they implement in this scenario?

1. A. Policies and procedures shall be established for managing the risks associated with applying changes to business-critical or customer (tenant)-impacting (physical and virtual) applications and systemsystem interface (API) designs and configurations, infrastructure network and systems components.
2. B. Policies and procedures shall be established, and supporting business processes and technical measures implemented, to restrict the installation of unauthorized software on organizationally-owned ormanaged user end-point devices (e.
3. C. issued workstations, laptops, and mobile devices) and IT infrastructure network and systems components.
4. D. All cloud-based services used by the company's mobile devices or BYOD shall be pre-approved for usage and the storage of company business data.
5. E. None of the above

Correct Answer: A

Which concept is a mapping of an identity, including roles, personas, and attributes, to an authorization?

1. A. Access control
2. B. Federated Identity Management
3. C. Authoritative source
4. D. Entitlement
5. E. Authentication

Correct Answer: D

Which of the following is NOT normally a method for detecting and preventing data migration into the cloud?

1. A. Intrusion Prevention System
2. B. URL filters
3. C. Data Loss Prevention
4. D. Cloud Access and Security Brokers (CASB)
5. E. Database Activity Monitoring

Correct Answer: A

CCM: In the CCM tool, “Encryption and Key Management” is an example of which of the following?

1. A. Risk Impact
2. B. Domain
3. C. Control Specification

Correct Answer: B