Cloud Security Alliance Certificate of Cloud Security Knowledge v5 (CCSKv5.0) - CCSK무료 덤프문제 풀어보기

A. Validating alerts and estimating the scope of incidents

B. Developing and updating incident response policies

C. Implementing network segmentation and isolation

D. Performing detailed forensic investigations

A. Configuring role-based authentication

B. Configuring secondary authentication

C. Establishing multiple accounts

D. Implementing least privilege accounts

E. Maintaining tight control of the primary account holder credentials

A. IaC automates incident detection and alerting mechanisms

B. IaC provides encryption and secure key management during recovery

C. IaC enables automated and consistent deployment of recovery environments

D. IaC is primarily used for designing network security policies

A. VPNs provide secure, encrypted connections between data centers and cloud deployments.

B. VPNs are more cost-effective than any other connectivity option.

C. VPNs provide higher bandwidth than direct connections.

D. VPNs eliminate the need for third-party authentication services.

A. Changes made in production are overwritten by the next code or template change.

B. Changes made in production are untouched by the next code or template change.

C. It depends on how the automation is configured.

D. Nothing.

E. Changes made in test are overwritten by the next code or template change.

A. They are executed in isolated, ephemeral environments

B. They run on dedicated long-running instances

C. They need continuous monitoring by the user

D. They require pre-allocated server space

A. Using secure, approved base images

B. Implementing network segmentation

C. Enforcing runtime protection measures

D. Regularly updating repository software

A. Developing incident response plans

B. Deploying network segmentation

C. Implementing advanced threat detection systems

D. Integrating identity management and securing devices

A. IP address and port number

B. Identity, device, and contextual factors

C. Username and password

D. Geolocation data exclusively

A. The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomes necessary.

B. Customers of SaaS providers in particular need to mitigate the risks of application lock-in.

C. Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.

D. A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.

E. Geographic redundancy ensures that Cloud Providers provide highly available services.

A. Documenting lessons learned and finalizing reports

B. Restoring systems to operational status while preventing recurrence

C. Identifying and classifying security threats

D. Monitoring network traffic for anomalies

A. True

B. False