CCSK試験無料問題集（275題）「Cloud Security Alliance Certificate of Cloud Security Knowledge (v4.0) 認定」

出題：1

Select the statement below which best describes the relationship between identities and attributes

A. An identity is a distinct and unique object within a particular namespace. Attributes are properties which belong to an identity. Each identity can have multiple attributes.

B. Attributes belong to entities and identities belong to attributes. Each attribute can have multiple identities but only one entity.

C. Identities are the network names given to servers. Attributes are the characteristics of each server.

D. An attribute is a unique object within a database. Each attribute it has a number of identities which help define its parameters.

E. Attributes are made unique by their identities.

正解：E 解答を投票する

出題：2

Which benefit of automated deployment pipelines most directly addresses continuous security and reliability?

A. They ensure code quality through regular reviews

B. They enhance collaboration through shared tools

C. They enable consistent and repeatable deployment processes

D. They provide detailed reports on team performance

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which technique is most effective for preserving digital evidence in a cloud environment?

A. Isolating the compromised system

B. Analyzing management plane logs

C. Taking snapshots of virtual machines

D. Regularly backing up data

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which of the following enhances Platform as a Service (PaaS) security by regulating traffic into PaaS components?

A. Network Access Control Lists

B. Intrusion Detection Systems

C. API Gateways

D. Hardware Security Modules

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

In the context of FaaS, what is primarily defined in addition to functions?

A. Network configurations

B. Data storage

C. Trigger events

D. User permissions

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which approach creates a secure network, invisible to unauthorized users?

A. Software-Defined Perimeter (SDP)

B. Virtual Private Network (VPN)

C. Intrusion Detection System (IDS)

D. Firewalls

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which statement best describes the impact of Cloud Computing on business continuity management?

A. Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.

B. Geographic redundancy ensures that Cloud Providers provide highly available services.

C. Customers of SaaS providers in particular need to mitigate the risks of application lock-in.

D. The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomes necessary.

E. A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.

正解：B 解答を投票する

出題：8

Which term describes any situation where the cloud consumer does
not manage any of the underlying hardware or virtual machines?

A. Container

B. Abstraction

C. Virtual machineless

D. Serverless computing

E. Provider managed

正解：D 解答を投票する

出題：9

Why is early integration of pre-deployment testing crucial in a cybersecurity project?

A. It eliminates the need for continuous integration.

B. It identifies issues before full deployment, saving time and resources.

C. It allows skipping final verification tests.

D. It increases the overall testing time and costs.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

What is a key advantage of using Infrastructure as Code (IaC) in application development?

A. It enables version control and rapid deployment.

B. It removes the need for manual testing.

C. It ensures zero configuration drift by default.

D. It eliminates the need for cybersecurity measures.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

If in certain litigations and investigations, the actual cloud application or environment itself is relevant to resolving the dispute in the litigation or investigation, how is the information likely to be obtained?

A. It would never be obtained in this situation

B. It would require a previous contractual agreement to obtain the application or access to the environment

C. It may require a subpoena of the provider directly

D. It would require an act of war

E. It would require a previous access agreement

正解：B 解答を投票する

出題：12

CCM: A hypothetical company called: "Health4Sure" is located in the United States and provides cloud based services for tracking patient health. The company is compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so that they will be able to present this document to potential clients.
Which of the following approach would be most suitable to assess the overall security posture of Health4Sure' s cloud service?

A. The CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls. This approach will save time.

B. The CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the security posture of their cloud service against each and every control in the CCM. This approach will allow a thorough assessment of the security posture.

C. The CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered as aresult of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls thoroughly. This approach saves time while being able to assess the company's overall security posture in an efficient manner.

正解：B 解答を投票する

出題：13

For third-party audits or attestations, what is critical for providers to publish and customers to evaluate?

A. Network or architecture diagrams including all end point security devices in use

B. Scope of the assessment and the exact included features and services for the assessment

C. Service-level agreements between all parties

D. Full API access to all required services

E. Provider infrastructure information including maintenance windows and contracts

正解：A 解答を投票する

出題：14

What is known as a code execution environment running within an operating system that shares and uses the resources of the operating system?

A. Container

B. Virtual machine

C. Abstraction

D. Platform-based Workload

E. Pod

正解：A 解答を投票する

CCSK試験無料問題集「Cloud Security Alliance Certificate of Cloud Security Knowledge (v4.0) 認定」