CSA CCSK - Certificate of Cloud Security Knowledge Exam
Page: 3 / 49
Total 244 questions
Question #11 (Topic: Single Topic)
Big data includes high volume, high variety, and high velocity.
A. False
B. True
Answer: B
Question #12 (Topic: Single Topic)
CCM: A hypothetical company called: `Health4Sure` is located in the United States and provides cloud based services for tracking patient health. The company is
compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM
toolkit so that they will be able to present this document to potential clients.
Which of the following approach would be most suitable to assess the overall security posture of Health4Sure's cloud service?
compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM
toolkit so that they will be able to present this document to potential clients.
Which of the following approach would be most suitable to assess the overall security posture of Health4Sure's cloud service?
A. The CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls. This approach will save time.
B. The CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered as a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls thoroughly. This approach saves time while being able to assess the companyג€™s overall security posture in an efficient manner.
C. The CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the security posture of their cloud service against each and every control in the CCM. This approach will allow a thorough assessment of the security posture.
Answer: B
Question #13 (Topic: Single Topic)
A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources
is called what?
is called what?
A. An entitlement matrix
B. A support table
C. An entry log
D. A validation process
E. An access log
Answer: A
Question #14 (Topic: Single Topic)
Cloud applications can use virtual networks and other structures, for hyper-segregated environments.
A. False
B. True
Answer: B
Question #15 (Topic: Single Topic)
Your cloud and on-premises infrastructures should always use the same network address ranges.
A. False
B. True
Answer: A
