CCSK Practice Test

CCSK Practice Test practice questions, page 2 of 10, with answer review and explanations.

Question 6

Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?

  1. Platform-as-a-service (PaaS)
  2. Desktop-as-a-service (DaaS)
  3. Infrastructure-as-a-service (IaaS)
  4. Identity-as-a-service (IDaaS)
  5. Software-as-a-service (SaaS)

Question 7

CCM: The following list of controls belong to which domain of the CCM? GRM 06 `" Policy GRM 07 `" Policy Enforcement GRM 08 `" Policy Impact on Risk Assessments GRM 09 `" Policy Reviews GRM 10 `" Risk Assessments GRM 11 `" Risk Management Framework

  1. Governance and Retention Management
  2. Governance and Risk Management
  3. Governing and Risk Metrics

Question 8

Which attack surfaces, if any, does virtualization technology introduce?

  1. The hypervisor
  2. Virtualization management components apart from the hypervisor
  3. Configuration and VM sprawl issues
  4. All of the above

Question 9

APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

  1. False
  2. True

Question 10

Which of the following is NOT a cloud computing characteristic that impacts incidence response?

  1. The on demand self-service nature of cloud computing environments.
  2. Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.
  3. The possibility of data crossing geographic or jurisdictional boundaries.
  4. Object-based storage in a private cloud.
  5. The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.