[Apr 14, 2023] TestBraindump CCSK Exam Practice Test Questions (Updated 112 Questions) [Q65-Q89]

NO.65 Private cloud model can be managed by third party who may not be part of the organization served by that private cloud.

NO.66 What refers refer the model that allows customers to scale their computer and/ or storage needs with little or no intervention from or prior communication with the provider. The services happen in real time?

NO.67 Audits should be robustly designed to reflect best practice, appropriate resources, and tested protocols and standards. They should also use what type of auditors?

NO.68 Which is the key mechanism used by organisations that supports. assures and demonstrate compliance?

NO.69 For third-party audits or attestations, what is critical for providers to publish and customers to evaluate?

NO.70 The containment phase of the incident response lifecycle requires taking systems offline.

NO.71 Which of the following document includes responsibilities and mechanisms for governance in cloud environment?

NO.72 Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?

NO.73 Ben was working on a project and hosted all its data on a public cloud. The project is now complete and he wants to remove the data Which of the following is best option for him in order to leave no remanence?

NO.74 Which one of the following is NOT one of phases for cloud auditing?

NO.75 Cloud applications can use virtual networks and other structures, for hyper-segregated environments.

NO.76 When investigating an incident in an Infrastructure as a Service (IaaS) environment, what can the user investigate on their own?

NO.77 When your bank or credit card company sends you a notification of changes in how it collects or shares data, it is sending that notification in compliance with:

NO.78 Which of the following can lead to vendor lock-in?

NO.79 A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?

NO.80 ISO 27001 certification can be taken as proof to achieve Third-party assessment level in CSA star program.

NO.81 Which of the following is one of the five essential characteristics of cloud computing as defined by NIST?

NO.82 ENISA: “VM hopping” is:

NO.83 Which of the following are communications method for components within a cloud, some of which (or an entirely different set) are exposed to the cloud user to manage their resources and configurations?

NO.84 An inherent weakness in an information system. security procedures. internal controls, or implementation that could be exploited by a threat source.

NO.85 Which of following responsibilities can never be transferred. even during cloud adoption?

NO.86 Which ISO standards addresses Privacy in the cloud environment?

NO.87 Like security and compliance. BC/DR is not a shared responsibility.

NO.88 Which of the following is NOT a characteristic of cloud computing?

NO.89 Which is the primary tool for governance in Cloud Computing environment?