Question 1

How can Identity and Access Management (IAM) policies on keys ensure adherence to the principle of least privilege?

Options :

A : By rotating keys on a regular basis

B : By using default policies for all keys

C : By specifying fine-grained permissions

D : By granting root access to administrators

Answer: C

Question 2

Which security concept includes the policy, process, and internal controls comprising how an organization is run – including the structures and policies of the leadership and other mechanisms for management?

Options :

A : Governance

B : Information security

C : Enterprise risk management

D : Information risk management

E : Compliance

Answer: A

Question 3

What are the two actions that are typical for your organization when there are residual risks? (Choose three).

Options :

A : Escalate

B : Ignore

C : Transfer

D : Avoid

E : Accept

Answer: C,D,E

Question 4

What tool allows teams to easily locate and integrate with approved cloud services?

Options :

A : Contracts

B : Shared Responsibility Model

C : Service Registry

D : Risk Register

Answer: C

Question 5

What is known as a code execution environment running within an operating system that shares and uses the

resources of the operating system?

Options :

A : Platform-based Workload

B : Pod

C : Abstraction

D : Container

E : Virtual machine

Answer: D

Free CCSK Mock Exam – Practice Online Confidently

Buying Options: