Download the Latest CCSK Dumps – 2026 CCSK Exam Questions [Q78-Q102]

NO.78 Which cloud deployment model involves a cloud and a datacenter, bound together by technology to enable data and application portability?

Hybrid cloud

Public cloud

Multi-cloud

Private cloud

NO.79 What process involves an independent examination of records, operations, processes, and controls within an organization to ensure compliance with cybersecurity policies, standards, and regulations?

Risk assessment

Audit

Penetration testing

Incident response

NO.80 How can key management be leveraged to prevent cloud providers from inappropriately accessing customer data?

Use strong multi-factor authentication

Secure backup processes for key management systems

Segregate keys from the provider hosting data

Stipulate encryption in contract language

Select cloud providers within the same country as customer

NO.81 Which of the following is not one of the categories of risks as defined in, ENISA (European Network and Information Security Agency) document on Security risk and recommendation?

Technical Risk

Legal Risk

Environmental Risk

Policy and organisational risk

NO.82 Which of the following will not be provided by cloud services when requested by the customer?

DLP solution results

SIEM logs

Details of security controls

Geographical locations of the datacentre

NO.83 Credentials and cryptographic keys must not be embedded in source code or distributed in public facing repositories such as GitHub.

True

False

NO.84 In a cloud scenario. who is the data processor and who is the data controller?

Cloud Service Provider is the data controller and its customer is the data processor

Database admin is the data controller and application owner is the data processor

Cloud Service Provider is the data processor and its customer is the data controller

Neither cloud service provider nor customer is data processor or data controller.

NO.85 What is the primary role of Identity and Access Management (IAM)?

To encrypt data at rest and in transit

Ensure only authorized entities access resources

To monitor and log all user activities and traffic

Ensure all users have the same level of access

NO.86 How does running applications on distinct virtual networks and only connecting networks as needed help?

It reduces hardware costs

It provides dynamic and granular policies with less management overhead

It locks down access and provides stronger data security

It reduces the blast radius of a compromised system

It enables you to configure applications around business groups

NO.87 CCM: In the CCM tool, “Encryption and Key Management” is an example of which of the following?

Risk Impact

Domain

Control Specification

NO.88 IT Risk management is best described in:

FIPS 140-2

ISO 27005

NIST SP800-14

ISO 27017

NO.89 Which principle reduces security risk by granting users only the permissions essential for their role?

Role-Based Access Control

Unlimited Access

Mandatory Access Control

Least-Privileged Access

NO.90 Which of the following from the governance hierarchy provides specific goals to minimize risk and maintain a secure environment?

Implementation guidance

Control objectives

Policies

Control specifications

NO.91 Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

More physical control over assets and processes.

Greater reliance on contracts, audits, and assessments due to lack of visibility or management.

Decreased requirement for proactive management of relationship and adherence to contracts.

Increased need, but reduction in costs, for managing risks accepted by the cloud provider.

None of the above.

NO.92 Which type of cloud workload would be most appropriate for running isolated applications with minimum resource overhead?

Containers

Function as a Service (FaaS)

AI Workloads

Virtual Machines (VMs)

NO.93 APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

False

True

NO.94 What is an essential security characteristic required when using multi-tenanttechnologies?

Segmented and segregated customer environments

Limited resource allocation

Resource pooling

Abstraction and automation

NO.95 Which of the following establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information(PII) in accordance with the privacy principles in IS0/IEC 29100 for the public cloud computing environment?

IS0 27017

IS0 27018

IS0 27032

IS0 27034

NO.96 What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?

Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

Maintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.

Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.

Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.

Both B and D.

NO.97 Which of the following is most commonly used to program Application Programming Interface(API)?

SOAP

JSON

HTTP

REST

NO.98 How does cloud adoption impact incident response processes in cybersecurity?

It only affects data storage and not incident response

It has no significant impact on incident response processes

It simplifies incident response by consolidating processes

It introduces different processes, technologies, and governance models

NO.99 Cloud customer and cloud service provider are jointly responsible legally for data breach or data loss in absence of any written clause regarding same in contract or SLA.

True

False

NO.100 Which two key capabilities are required for technology to be considered cloud computing?

Abstraction and orchestration

Abstraction and resource pooling

Multi-tenancy and isolation

Virtualization and multi-tenancy

The CCSK v5.0 Study Guide defines cloud computing based on the NIST SP 800-145 definition, which outlines five essential characteristics: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. Two key capabilities that underpin these characteristics areabstractionandresource pooling.
Abstractionrefers to the virtualization layer that hides the underlying physical infrastructure, allowing users to interact with resources (e.g., compute, storage, networking) without needing to manage the hardware directly.
Resource poolingenables the provider’s computing resources to be pooled to serve multiple consumers using a multi-tenant model, with resources dynamically assigned and reassigned based on demand.
From theCCSK v5.0 Study Guide, Domain 1 (Cloud Computing Concepts and Architectures), Section 1.2:
“Cloud computing relies on abstraction to simplify the user experience and resource pooling to efficiently allocate resources across multiple tenants. Resource pooling is a defining characteristic, where the provider’s computing resources are pooled to serve multiple consumers, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand.” Option B correctly identifiesabstraction and resource poolingas the two key capabilities.
Option A (Abstraction and orchestration) is incorrect because orchestration, while important for automation, is not a defining characteristic of cloud computing.
Option C (Multi-tenancy and isolation) is incorrect because, while multi-tenancy is a feature of resource pooling, isolation is a security mechanism, not a core capability of cloud computing.
Option D (Virtualization and multi-tenancy) is incorrect because virtualization is a technology that enables abstraction, but multi-tenancy alone is not sufficient to define cloud computing.
References:
CCSK v5.0 Study Guide, Domain 1, Section 1.2: Cloud Computing Definitions and Characteristics.
NIST SP 800-145: The NIST Definition of Cloud Computing.

NO.101 Which factor is typically considered in data classification?

CI/CD step

Storage capacity requirements

Sensitivity of data

Data controller

NO.102 Which of the following statements best reflects the responsibility of organizations regarding cloud security and data ownership?

Cloud providers are responsible for everything under the ‘limited O responsibilities clauses.’ The customer and the provider have joint accountability.

Cloud providers assume full responsibility for the security obligations, and cloud customers are accountable for overall compliance.

Data ownership rights are solely determined by the cloud provider, leaving organizations with no control or accountability over their data.

Organizations are accountable for the security and compliance of their data and systems, even though they may lack full visibility into their cloud provider’s infrastructure.

Download the Latest CCSK Dumps – 2026 CCSK Exam Questions [Q78-Q102]

[Apr 14, 2023] TestBraindump CCSK Exam Practice Test Questions (Updated 112 Questions) [Q65-Q89]

Leave a Reply Cancel reply

Related Posts

Leave a Reply Cancel reply