CCSK Practice Test

CCSK Practice Test practice questions, page 8 of 10, with answer review and explanations.

Question 36

Which concept is a mapping of an identity, including roles, personas, and attributes, to an authorization?

  1. Access control
  2. Federated Identity Management
  3. Authoritative source
  4. Entitlement
  5. Authentication

Question 37

Which concept provides the abstraction needed for resource pools?

  1. Virtualization
  2. Applistructure
  3. Hypervisor
  4. Metastructure
  5. Orchestration

Question 38

Network logs from cloud providers are typically flow records, not full packet captures.

  1. False
  2. True

Question 39

Select the best definition of `compliance` from the options below.

  1. The development of a routine that covers all necessary security measures.
  2. The diligent habits of good security practices and recording of the same.
  3. The timely and efficient filing of security reports.
  4. The awareness and adherence to obligations, including the assessment and prioritization of corrective actions deemed necessary and appropriate.
  5. The process of completing all forms and paperwork necessary to develop a defensible paper trail.

Question 40

CCM: In the CCM tool, `Encryption and Key Management` is an example of which of the following?

  1. Risk Impact
  2. Domain
  3. Control Specification