CCSKv5

CCSKv5 practice questions, page 8 of 9, with answer review and explanations.

Question 36

Which of the following best describes the shift-left approach in software development?

  1. Relies only on automated security testing tools
  2. Emphasizes post-deployment security audits
  3. Focuses on security only during the testing phase
  4. Integrates security early in the development process

Question 37

In the context of cloud security, what is the primary benefit of implementing Identity and Access Management (IAM) with attributes and user context for access decisions?

  1. Simplifies regulatory compliance by using a single sign-on mechanism.
  2. Reduces log analysis requirements
  3. Enhances security by supporting authorizations based on the current context and status
  4. These are required for proper implementation of RBAC

Question 38

Which aspect of cloud architecture ensures that a system can handle growing amounts of work efficiently?

  1. Scalability
  2. Security
  3. Reliability
  4. Performance

Question 39

What is the primary role of Identity and Access Management (IAM)?

  1. To encrypt data at rest and in transit
  2. Ensure only authorized entities access resources
  3. To monitor and log all user activities and traffic
  4. Ensure all users have the same level of access

Question 40

Which Identity and Access Management (IAM) principle focuses on implementing multiple security layers to dilute access power, thereby averting a misuse or compromise?

  1. Continuous Monitoring
  2. Federation
  3. Segregation of Duties
  4. Principle of Least Privilege