CCSK Practice Test

CCSK Practice Test practice questions, page 7 of 10, with answer review and explanations.

Question 31

Sending data to a provider's storage over an API is likely as much more reliable and secure than setting up your own SFTP server on a VM in the same provider

  1. False
  2. True

Question 32

What is true of searching data across cloud environments?

  1. You might not have the ability or administrative rights to search or access all hosted data.
  2. The cloud provider must conduct the search with the full administrative controls.
  3. All cloud-hosted email accounts are easily searchable.
  4. Search and discovery time is always factored into a contract between the consumer and provider.
  5. You can easily search across your environment using any E-Discovery tool.

Question 33

How does running applications on distinct virtual networks and only connecting networks as needed help?

  1. It reduces hardware costs
  2. It provides dynamic and granular policies with less management overhead
  3. It locks down access and provides stronger data security
  4. It reduces the blast radius of a compromised system
  5. It enables you to configure applications around business groups

Question 34

How can virtual machine communications bypass network security controls?

  1. VM communications may use a virtual network on the same hardware host
  2. The guest OS can invoke stealth mode
  3. Hypervisors depend upon multiple network interfaces
  4. VM images can contain rootkits programmed to bypass firewalls
  5. Most network security systems do not recognize encrypted VM traffic

Question 35

ENISA: `VM hopping` is:

  1. Improper management of VM instances, causing customer VMs to be commingled with other customer systems.
  2. Looping within virtualized routing systems.
  3. Lack of vulnerability management standards.
  4. Using a compromised VM to exploit a hypervisor, used to take control of other VMs.
  5. Instability in VM patch management causing VM routing errors.