Question 1

Which of the following is NOT a method of object storage encryption?

Options :

A : Externally managed encryption

B : File/folder encryption

C : Enterprise digital rights management

D : Proxy encryption

E : Client/application encryption

Answer: C

Question 2

Which practice ensures container security by preventing post-deployment modifications?

Options :

A : Implementing dynamic network segmentation policies

B : Employing Role-Based Access Control (RBAC) for container access

C : Regular vulnerability scanning of deployed containers

D : Use of immutable containers

Answer: D

Question 3

CCM: A hypothetical company called: “Health4Sure” is located in the United States and provides cloud based

services for tracking patient health. The company is compliant with HIPAA/HITECH Act among other industry

standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so

that they will be able to present this document to potential clients.

Which of the following approach would be most suitable to assess the overall security posture of Health4Sure’s

cloud service?

Options :

A :

The CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM

controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess

the remaining controls. This approach will save time.

B :

The CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the

CCM controls already covered as a result of their compliance with HIPPA/HITECH Act. They could then

assess the remaining controls thoroughly. This approach saves time while being able to assess the

company’s overall security posture in an efficient manner.

C :

The CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the

security posture of their cloud service against each and every control in the CCM. This approach will allow a

thorough assessment of the security posture.

Answer: C

Question 4

What are the two most common REST API authentication methods found in use today with the cloud? (Choose two).

Options :

A : 802.1X

B : HTTP Request Signing

C : OAuth

D : Web proxy

Answer: B,C

Question 5

What is known as a code execution environment running within an operating system that shares and uses the

resources of the operating system?

Options :

A : Platform-based Workload

B : Pod

C : Abstraction

D : Container

E : Virtual machine

Answer: D

Free CCSK Mock Exam – Practice Online Confidently

Buying Options: