CCSK問題集、Cloud Security Alliance実際の試験問題

質問 1

Which of the following from the governance hierarchy provides specific goals to minimize risk and maintain a secure environment?

A. Implementation guidance

B. Policies

C. Control specifications

D. Control objectives

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 2

CCM: Cloud Controls Matrix (CCM) is a completely independent cloud
assessment toolkit that does not map any existing standards.

A. True

B. False

正解: B

質問 3

Sending data to a provider's storage over an API is likely as much more reliable and secure than setting up your own SFTP server on a VM in the same provider

A. True

B. False

正解: A

質問 4

In the initial stage of implementing centralized identity management, what is the primary focus of cybersecurity measures?

A. Deploying network segmentation

B. Implementing advanced threat detection systems

C. Integrating identity management and securing devices

D. Developing incident response plans

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

What is a potential concern of using Security-as-a-Service (SecaaS)?

A. Lack of visibility

B. Deployment flexibility

C. Insulation of clients

D. Intelligence sharing

E. Scaling and costs

正解: A

質問 6

Which of the following is used for governing and configuring cloud resources and is a top priority in cloud security programs?

A. Orchestrators

B. Management plane

C. Abstraction layer

D. Management Console

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which method is considered best practice for creating secure virtual machine (VM) images?

A. Manually configuring each VM image

B. Using image factories and trusted sources

C. Downloading images from random online repositories

D. Cloning existing, running VMs

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 8

Which type of controls should be implemented when required controls for a cybersecurity framework cannot be met?

A. Administrative controls

B. Preventive controls

C. Detective controls

D. Compensating controls

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

What is the primary reason dynamic and expansive cloud environments require agile security approaches?

A. To simplify the deployment of virtual machines

B. To quickly respond to evolving threats and changing infrastructure

C. To reduce costs associated with physical hardware

D. To ensure high availability and load balancing

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 10

What are the primary security responsibilities of the cloud provider in compute virtualizations?

A. Enforce isolation and configure the security settings

B. Monitor and log workloads and configure the security settings

C. Maintain a secure virtualization infrastructure and configure the security settings

D. Enforce isolation and maintain a secure virtualization infrastructure

E. Enforce isolation and monitor and log workloads

正解: D

質問 11

What is the primary purpose of cloud governance in an organization?

A. To reduce the cost of cloud services

B. To increase data transfer speeds within the cloud environment

C. To eliminate the need for on-premises data centers

D. To ensure compliance, security, and efficient management aligned with the organization's goals

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 12

Which of the following best describes the role of program frameworks in defining security components and technical controls?

A. Program frameworks evaluate the performance of individual security tools

B. Program frameworks focus on implementing specific security technologies

C. Program frameworks help organize overarching security policies and objectives

D. Program frameworks primarily define compliance requirements for regulations

正解: C

解説: (PassTest メンバーにのみ表示されます)

Cloud Security Alliance Certificate of Cloud Security Knowledge v5 (CCSKv5.0) - CCSK 模擬練習