CCSK practice test

1. Question 1 · 1

   All cloud services utilize virtualization technologies.

   Choose true or false.

   • False
   • True

2. Question 2 · 1

   Which of the following is NOT a cloud computing characteristic that impacts incidence response?

   Choose one answer.

   • The on demand self-service nature of cloud computing environments.
   • Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.
   • The possibility of data crossing geographic or jurisdictional boundaries.
   • Object-based storage in a private cloud.
   • The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.

3. Question 3 · 1

   How can web security as a service be deployed for a cloud consumer?

   Choose one answer.

   • By proxying or redirecting web traffic to the cloud provider
   • By utilizing a partitioned network drive
   • On the premise through a software or appliance installation
   • Both A and C
   • None of the above

4. Question 4 · 1

   When configured properly, logs can track every code, infrastructure, and configuration change and connect it back to the submitter and approver, including the test results.

   Choose true or false.

   • False
   • True

5. Question 5 · 1

   What of the following is NOT an essential characteristic of cloud computing?

   Choose one answer.

   • Broad Network Access
   • Measured Service
   • Third Party Service
   • Rapid Elasticity
   • Resource Pooling

6. Question 6 · 1

   Without virtualization, there is no cloud.

   Choose true or false.

   • False
   • True

7. Question 7 · 1

   All assets require the same continuity in the cloud.

   Choose true or false.

   • False
   • True

8. Question 8 · 1

   Which type of application security testing tests running applications and includes tests such as web vulnerability testing and fuzzing?

   Choose one answer.

   • Code Review
   • Static Application Security Testing (SAST)
   • Unit Testing
   • Functional Testing
   • Dynamic Application Security Testing (DAST)

9. Question 9 · 1

   CCM: The Cloud Service Delivery Model Applicability column in the CCM indicates the applicability of the cloud security control to which of the following elements?

   Choose one answer.

   • Mappings to well-known standards and frameworks
   • Service Provider or Tenant/Consumer
   • Physical, Network, Compute, Storage, Application or Data
   • SaaS, PaaS or IaaS

10. Question 10 · 1

    Any given processor and memory will nearly always be running multiple workloads, often from different tenants.

    Choose true or false.

    • False
    • True

11. Question 11 · 1

    In which deployment model should the governance strategy consider the minimum common set of controls comprised of the Cloud Service Provider contract and the organization's internal governance agreements?

    Choose one answer.

    • Public
    • PaaS
    • Private
    • IaaS
    • Hybrid

12. Question 12 · 1

    What is known as the interface used to connect with the metastructure and configure the cloud environment?

    Choose one answer.

    • Administrative access
    • Management plane
    • Identity and Access Management
    • Single sign-on
    • Cloud dashboard

13. Question 13 · 1

    Big data includes high volume, high variety, and high velocity.

    Choose true or false.

    • False
    • True

14. Question 14 · 1

    What does it mean if the system or environment is built automatically from a template?

    Choose one answer.

    • Nothing.
    • It depends on how the automation is configured.
    • Changes made in production are overwritten by the next code or template change.
    • Changes made in test are overwritten by the next code or template change.
    • Changes made in production are untouched by the next code or template change.

15. Question 15 · 1

    Which type of application security testing involves manual activity that is not necessarily integrated into automated testing?

    Choose one answer.

    • Code Review
    • Static Application Security Testing (SAST)
    • Unit Testing
    • Functional Testing
    • Dynamic Application Security Testing (DAST)

Paid access to all 201 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.