New Year Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Cloud Security Alliance CCSK Actual Questions

Page: 2 / 13
Total 177 questions

Certificate of Cloud Security Knowledge (v5.0) Questions and Answers

Question 5

What is a key advantage of using Policy-Based Access Control (PBAC) for cloud-based access management?

Options:

A.

PBAC eliminates the need for defining and managing user roles and permissions.

B.

PBAC is easier to implement and manage compared to Role-Based Access Control (RBAC).

C.

PBAC allows enforcement of granular, context-aware security policies using multiple attributes.

D.

PBAC ensures that access policies are consistent across all cloud providers and platforms.

Question 6

Which concept focuses on maintaining the same configuration for all infrastructure components, ensuring they do not change once deployed?

Options:

A.

Component credentials

B.

Immutable infrastructure

C.

Infrastructure as code

D.

Application integration

Question 7

How can Identity and Access Management (IAM) policies on keys ensure adherence to the principle of least privilege?

Options:

A.

By rotating keys on a regular basis

B.

By using default policies for all keys

C.

By specifying fine-grained permissions

D.

By granting root access to administrators

Question 8

What's the difference between DNS Logs and Flow Logs?

Options:

A.

They represent the logging of different networking solutions, and DNS Logs are more suitable for a ZTA implementation

B.

DNS Logs record domain name resolution requests and responses, while Flow Logs record info on source, destination, protocol

C.

They play identical functions and can be used interchangeably

D.

DNS Logs record all the information about the network behavior, including source, destination, and protocol, while Flow Logs record users' applications behavior

Page: 2 / 13
Total 177 questions