CCSKv5

CCSKv5 practice questions, page 5 of 9, with answer review and explanations.

Question 21

Which practice minimizes human error in long-running cloud workloads’ security management?

  1. Increasing manual security audits frequency
  2. Converting all workloads to ephemeral
  3. Restricting access to workload configurations
  4. Implementing automated security and compliance checks

Question 22

What is a primary benefit of implementing micro-segmentation within a Zero Trust Architecture?

  1. Simplifies network design and maintenance
  2. Enhances security by isolating workloads from each other
  3. Increases the overall performance of network traffic
  4. Reduces the need for encryption across the network

Question 23

What is one of the primary advantages of including Static Application Security Testing (SAST) in Continuous Integration (CI) pipelines?

  1. Identifies code vulnerabilities early in the development
  2. Increases the speed of deployment to production
  3. Improves runtime performance of the application
  4. Enhances the user interface of the application

Question 24

What is a key component of governance in the context of cybersecurity?

  1. Defining roles and responsibilities
  2. Standardizing technical specifications for security control
  3. Defining tools and technologies
  4. Enforcement of the Penetration Testing procedure

Question 25

Which aspect of a Cloud Service Provider's (CSPs) infrastructure security involves protecting the interfaces used to manage configurations and resources?

  1. Management plane
  2. Virtualization layers
  3. Physical components
  4. PaaS/SaaS services