Question 1

How is encryption managed on multi-tenant storage?

Options :

A : Single key for all data owners

B : One key per data owner

C : Multiple keys per data owner

D : The answer could be A, B, or C depending on the provider

E : C for data subject to the EU Data Protection Directive; B for all others

Answer: B

Question 2

In federated identity management, what role does the identity provider (IdP) play in relation to the relying party?

Options :

A : The IdP relies on the relying party to authenticate and authorize users.

B : The relying party makes assertions to the IdP about user authorizations.

C : The IdP and relying party have no direct trust relationship.

D : The IdP makes assertions to the relying party after building a trust relationship.

Answer: D

Question 3

Which practice ensures container security by preventing post-deployment modifications?

Options :

A : Implementing dynamic network segmentation policies

B : Employing Role-Based Access Control (RBAC) for container access

C : Regular vulnerability scanning of deployed containers

D : Use of immutable containers

Answer: D

Question 4

CCM: A hypothetical company called "lnfrastructure4Sure" provides Infrastructure as a Service (IaaS) to its clients. A customer wants to review Infrastructure4Sure's hypervisor security implementation measures. Which of the following measures should Infrastructure4Sure implement?

Options :

A : Choose a hypervisor with a smaller footprint for a reduced attack surface

B : Harden the hypervisor-s configuration to increase areas of vulnerability (e.g., disabling memory sharing between VMs running within the same hypervisor hosts).

C : Connect unused physical hardware devices and enable clipboard or file-sharing services

D : Monitor for signs of compromise by analyzing hypervisor logs on an ongoing basis

E : A and D

Answer: A

Question 5

Which of the following best describes the primary purpose of cloud security frameworks?

Options :

A : To implement detailed procedural instructions for security measures

B : To organize control objectives for achieving desired security outcomes

C : To ensure compliance with all regulatory requirements

D : To provide tools for automated security management

Answer: B

Higher Test Marks with Free Online CCSK Exam Practice

Buying Options: