CCSK Free Practice Test

Which of the following encryption methods would be utilized when object storage is used as the back-end for an application?

1. A. Database encryption
2. B. Media encryption
3. C. Asymmetric encryption
4. D. Object encryption
5. E. Client/application encryption

Correct Answer: E

What type of information is contained in the Cloud Security Alliance's Cloud Control Matrix?

1. A. Network traffic rules for cloud environments
2. B. A number of requirements to be implemented, based upon numerous standards and regulatory requirements
3. C. Federal legal business requirements for all cloud operators
4. D. A list of cloud configurations including traffic logic and efficient routes
5. E. The command and control management hierarchy of typical cloud company

Correct Answer: B

In which deployment model should the governance strategy consider the minimum common set of controls comprised of the Cloud Service Provider contract and the organization's internal governance agreements?

1. A. Public
2. B. PaaS
3. C. Private
4. D. IaaS
5. E. Hybrid

Correct Answer: E

What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?

1. A. Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.
2. B. Maintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.
3. C. Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.
4. D. Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.
5. E. Both B and D.

Correct Answer: B