CCSK 試験問題を無料オンラインアクセス

What key activities are part of the preparation phase in incident response planning?

• A.Establishing a response process, training, communication plans, and infrastructure evaluations
• B.Developing malware analysis procedures and penetration testing
• C.Implementing encryption and access controls
• D.Creating incident reports and post-incident reviews

Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?

• A.Chaos Engineering
• B.Expected Engineering
• C.Planned Outages
• D.Resiliency Planning
• E.Organized Downtime

Audits should be robustly designed to reflect best practice, appropriate resources, and tested protocols and standards. They should also use what type of auditors?

• A.Certified by CSA
• B.None of the above
• C.Auditors working in the interest of the cloud customer
• D.Independent auditors
• E.Auditors working in the interest of the cloud provider

What does Zero Trust Network Access (ZTNA) primarily use to control access to applications?

• A.Username and password
• B.IP address and port number
• C.Identity, device, and contextual factors
• D.Geolocation data exclusively

What is true of security as it relates to cloud network infrastructure?

• A.You should implement a default deny with cloud firewalls.
• B.You should apply cloud firewalls on a per-network basis.
• C.You should implement a default allow with cloud firewalls and then restrict as necessary.
• D.You should deploy your cloud firewalls identical to the existing firewalls.
• E.You should always open traffic between workloads in the same virtual subnet for better visibility.