[Nov 02, 2022] CCSK Exam Dumps 100% Same Q&A In Your Real Exam
CCSK Test Engine Dumps Training With 60 Questions
NEW QUESTION 12
Which of the following processes leverages virtual network topologies to run more smaller and more isolated networks without incurring additional hardware costs?
- A. Grid networking
- B. Micro-segmentation
- C. Converged Networking
- D. VLANs
Answer: B
Explanation:
Explanation:
This type of question are asked to create confusion.
Following are the five phases of SDLC:
1. Planning and requirements analysis: Business and security requirements and standards are being determined. This phase is the main focus of the project managers and stakeholders. Meetings with managers, stakeholders, and users are held to determine requirements. The software development lifecycle calls for all business requirements(functional and nonfunctional)to be defined even before initial design begins. Planning for the quality-assurance requirements and identification of the risks associated with the project are also conducted in the planning stage. The requirements are then analyzed for their validity and the possibility of incorporating them into the system to be developed.
2. Defining: The defining phase is meant to clearly define and document the product requirements to place them in front of the customers and get them approved. This is done through a requirement specification document, which consists of all the product requirements to be designed and developed during the project lifecycle.
3. Designing: System design helps in specifying hardware and system requirements and helps in defining overall system architecture. The system design specifications serve as input for the next phase of the model. Threat modeling and secure design elements should be undertaken and discussed here.
4. Developing: Upon receiving the system design documents, work is divided into modules or units and actual coding starts. This is typically the longest phase of the software development lifecycle. Activities include code review, unit testing, and static analysis.
5. Testing: After the code is developed, it is tested against the requirements to make sure that the product is actually solving the needs gathered during the requirements phase. During this phase, unit testing, integration testing, system testing, and acceptance testing are conducted.
NEW QUESTION 13
Where does the private cloud reside?
- A. Off-premise
- B. On-premise or off-premise
- C. On-premise
- D. Remote
Answer: B
Explanation:
According to CSA security guide lines. although. private cloud is for organisation's own use. it can reside on-site or off-premise as well.
NEW QUESTION 14
Which is the primary tool for governance in Cloud Computing environment?
- A. Contract
- B. Service Level Agreement
- C. Operational level Agreement
- D. Governance memo
Answer: C
Explanation:
Contracts: The primary tool of governance is the contract between a cloud provider and a cloud customer(this is true for public and private cloud). The contract is your only guarantee of any level of service or commitment-assuming there is no breach of contract, which tosses everything into a legal scenario. Contracts are the primary tool to extend governance into business partners and providers.
Ref: Security Guidance v4.0 Copyright2017, Cloud Security Alliance(used for educational purpose here)
NEW QUESTION 15
Credentials and cryptographic keys must not be embedded in source code or distributed in public facing repositories such as GitHub.
- A. True
- B. False
Answer: A
Explanation:
This is true. Credentials and cryptographic keys must not be embedded in source code or distributed in public facing repositories such as GitHub, because there is a significant chance of discovery and misuse.
Keys need to be appropriately secured and a well- secured public key infrastructure (PKI) is needed to ensure key-management activities are carried out.
NEW QUESTION 16
Which of the following is an effective way of segregating different cloud networks and datacenters in a hybrid cloud environment?
- A. Dedicated Hosting
- B. Bastion Virtual Network
- C. Virtual Private Networks
- D. Virtual LANs
Answer: B
Explanation:
One emerging architecture for hybrid cloud connectivity is "bastion" or "transit" virtual networks:
. This scenario allows you to connect multiple, different cloud networks to a data center using a single hybrid connection. The cloud user builds a dedicated virtual network for the hybrid connection and then peers any other networks through the designated bastion network.
. Second-level networks connect to the data center through the bastion network, but since they aren't peered to each other they can't talk to each other and are effectively segregated. Also, you can deploy different security tools, firewall rulesets, and Access Control Lists in the bastion network to further protect traffic in and out of the hybrid connection.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION 17
What refers refer the model that allows customers to scale their computer and/ or storage needs with little or no intervention from or prior communication with the provider. The services happen in real time?
- A. On-demand self-service
- B. Resource pooling
- C. Broad network access
- D. Rapid elasticity
Answer: A
Explanation:
It is the characteristic of 0n-demand self-service that allows customers to scale their computer and/ or storage needs with little or no intervention from or prior communication with the provider
NEW QUESTION 18
What is the process to determine any weaknesses in the application and the potential ingress, egress, and actors involved before the weakness is introduced to production?
- A. STRIDE
- B. Vulnerability Assessment
- C. Threat Detection
- D. Threat Modelling
Answer: D
Explanation:
Threat modelling is performed once an application design is created. The goal of threat modelling is to determine any weaknesses in the application and the potential ingress, egress, and actors involved before the weakness is introduced to production. It is the overall attack surface that is amplified by the cloud, and the threat model has to take that into account.
NEW QUESTION 19
Which of the following is not one of the categories of risks as defined in, ENISA (European Network and Information Security Agency) document on Security risk and recommendation?
- A. Legal Risk
- B. Policy and organisational risk
- C. Technical Risk
- D. Environmental Risk
Answer: D
Explanation:
Environmental Risk are not defined as a category in the ENISA document however. all the other three are defined as categories.
NEW QUESTION 20
Which form of storage has features are typically minimal. allowing you to only store, retrieve, copy and delete files as well as the ability to control which users can undertake these actions?
- A. Block Storage
- B. Volume Storage
- C. Ephemeral Storage
- D. Object Storage
Answer: D
Explanation:
Object Storage has features are typically minimal, allowing you to only store, retrieve, copy, and delete files as well as the ability to control which users can undertake these actions.
NEW QUESTION 21
Which of the following is a responsibility of Cloud customer?
- A. Isolation
- B. Meta Structure
- C. Secure Virtualization Infrastructure
- D. Image Asset Management
Answer: D
Explanation:
Image asset management. Cloud compute deployments are based on master images-be it a virtual machine, container, or other code-that are then run in the cloud. This is often highly automated and results in a larger number of images to base assets on, compared to traditional computing master images. Managing these-including which meet security requirements, where they can be deployed, and who has access to them-is an important security responsibility.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION 22
Which of the following are communications method for components within a cloud, some of which (or an entirely different set) are exposed to the cloud user to manage their resources and configurations?
- A. API Gateway
- B. Data Identifiers
- C. Application Programming Interfaces (API)
- D. IPSEC
Answer: C
Explanation:
All this is facilitated using Application Programming Interfaces, APIs are typically the underlying communications method for components within a cloud. some of which (or an entirely different set) are exposed to the cloud user to manage their resources and configurations. Most cloud APIs these days use REST (Representational State Transfer). which runs over the HTTP protocol, making it extremelywe11 suited for Internet services.
Ref: CSA Security Guidelines V4.0
NEW QUESTION 23
Which of the following leverages virtual network topologies to run more. smaller. and more isolated networks without incurring additional hardware costs that historically make such models prohibitive?
- A. VLANS
- B. Micro LANs
- C. BitVLANS
- D. Micro segmentation
Answer: D
Explanation:
Micro segmentation(also sometimes referred to as hyper segregation) leverages virtual network topologies to run more, smaller, and more isolated networks without incurring additional hardware costs that historically make such models prohibitive. Since the entire networks are defined in software without many of the traditional addressing issues, it is far more feasible to run these multiple, software- defined environments.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION 24
Private cloud model can be managed by third party who may not be part of the organization served by that private cloud.
- A. True
- B. False
Answer: A
Explanation:
This is true
This is a tricky question that you should look into carefully. Main purpose of private cloud is usage by one organization (use) but it can be managed by third party as well.
Definition: Private cloud
According to NIST, "the cloud infrastructure is provisioned for exclusive use by a single organisation comprising multiple consumers (e.g, business units). It may be owned, managed, and operated by the organisation, a third party or some combination of them, and it may exist on or off premises. "
NEW QUESTION 25
John said that he is looking for cloud service which is self-serviced and has a on-demand capacity. Which service model is he referring to?
- A. SaaS
- B. XaaS
- C. PaaS
- D. IaaS
Answer: D
Explanation:
Following are the characteristics of IaaS service model of cloud computing:
1. Scale
2. Converged network and IT capacity pool
3. Self-service and on-demand capacity
4. High reliability and resilience
NEW QUESTION 26
"Cloud provider acquisition" as a risk fall under which of the following categories?
- A. Technical risk
- B. Legal Risk
- C. Environmental Risk
- D. Policy and Organizational Risk
Answer: D
Explanation:
Cloud provider acquisition comes under Policy and Organizational Risk and can be categorised as follows.
As in any new IT market, competitive pressure, an inadequate business strategy, lack of financial support, etc, could lead some providers to go out of business or at least to force them to restructure their service portfolio offering. In other words, it is possible that in the short or medium term some cloud computing services could be terminated.
NEW QUESTION 27
Which of the cloud service model has least maintenance or administration from a cloud customer perspective?
- A. XaaS
- B. PaaS
- C. SaaS
- D. IaaS
Answer: C
Explanation:
SaaS requires least maintenance from the customer as all the infrastructure up to application is managed by the cloud service provider
NEW QUESTION 28
Centralization of log streams is charactertic of which devices?
- A. IPS
- B. SIEM
- C. IDS
- D. DLP
Answer: B
Explanation:
SIEM is a combination of Security Incident Management(SIM)and Security Event Management(SEM).
A SEM system centralizes the storage and interpretation of logs and allows near real-time analysis which enables security personnel to take defensive actions more quickly. A SIM system collects data into a central repository for trend analysis and provides automated reporting for compliance and centralised reporting.
NEW QUESTION 29
......
CCSK Practice Test Pdf Exam Material: https://pass4sure.exam-killer.com/CCSK-valid-questions.html
