CCSK Free Practice Test

A security failure at the root network of a cloud provider will not compromise the security of all customers because of multitenancy configuration.

1. A. False
2. B. True

Correct Answer: A

If the management plane has been breached, you should confirm the templates/configurations for your infrastructure or applications have not also been compromised.

1. A. False
2. B. True

Correct Answer: A

Audits should be robustly designed to reflect best practice, appropriate resources, and tested protocols and standards. They should also use what type of auditors?

1. A. Auditors working in the interest of the cloud customer
2. B. Independent auditors
3. C. Certified by CSA
4. D. Auditors working in the interest of the cloud provider
5. E. None of the above

Correct Answer: B

Which attack surfaces, if any, does virtualization technology introduce?

1. A. The hypervisor
2. B. Virtualization management components apart from the hypervisor
3. C. Configuration and VM sprawl issues
4. D. All of the above

Correct Answer: D

Which statement best describes the impact of Cloud Computing on business continuity management?

1. A. A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.
2. B. The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomes necessary.
3. C. Customers of SaaS providers in particular need to mitigate the risks of application lock-in.
4. D. Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.
5. E. Geographic redundancy ensures that Cloud Providers provide highly available services.

Correct Answer: E