CCSK VCE Exam Download

Certificate of Cloud Security Knowledge (v4.0) Questions and Answers

Question 13

An important consideration when performing a remote vulnerability test of a cloud-based application is to

Obtain provider permission for test

Use techniques to evade cloud provider’s detection systems

Use application layer testing tools exclusively

Use network layer testing tools exclusively

Schedule vulnerability test at night

Question 14

APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

False

True

Question 15

CCM: The Architectural Relevance column in the CCM indicates the applicability of the cloud security control to which of the following elements?

Service Provider or Tenant/Consumer

Physical, Network, Compute, Storage, Application or Data

SaaS, PaaS or IaaS

Question 16

Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

More physical control over assets and processes.

Greater reliance on contracts, audits, and assessments due to lack of visibility or management.

Decreased requirement for proactive management of relationship and adherence to contracts.

Increased need, but reduction in costs, for managing risks accepted by the cloud provider.

None of the above.