CCSK Practice Test

CCSK Practice Test practice questions, page 6 of 10, with answer review and explanations.

Question 26

To understand their compliance alignments and gaps with a cloud provider, what must cloud customers rely on?

  1. Provider documentation
  2. Provider run audits and reports
  3. Third-party attestations
  4. Provider and consumer contracts
  5. EDiscovery tools

Question 27

Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

  1. More physical control over assets and processes.
  2. Greater reliance on contracts, audits, and assessments due to lack of visibility or management.
  3. Decreased requirement for proactive management of relationship and adherence to contracts.
  4. Increased need, but reduction in costs, for managing risks accepted by the cloud provider.
  5. None of the above.

Question 28

Which data security control is the LEAST likely to be assigned to an IaaS provider?

  1. Application logic
  2. Access controls
  3. Encryption solutions
  4. Physical destruction
  5. Asset management and tracking

Question 29

How does virtualized storage help avoid data loss if a drive fails?

  1. Multiple copies in different locations
  2. Drives are backed up, swapped, and archived constantly
  3. Full back ups weekly
  4. Data loss is unavoidable with drive failures
  5. Incremental backups daily

Question 30

What is the newer application development methodology and philosophy focused on automation of application development and deployment?

  1. Agile
  2. BusOps
  3. DevOps
  4. SecDevOps
  5. Scrum