Section 8: Certificate of Cloud Security Knowledge (CCSK) V4 (Anthony Sequeira)

Question 1

Which statement about SECaaS is false?

A.Introduces security products or services delivered as a cloud service provider
B.Most often incorporates SaaS or PaaS
C.NIST characteristics must still be met
D.Used to protect cloud environments exclusively

Answer 1

D.Used to protect cloud environments exclusively

Question 2

What SECaaS offering ensures careful logging of event data from virtual and real networks?

A.SIEM
B.KMS
C.WSG
D.CASB

Answer 2

A.SIEM

Question 3

In which phase of an incident response lifecycle might you validate alerts and escalations?

A.Preparation
B.Detection and Analysis
C.Containment, Eradication and Recovery
D.Post-mortem

Answer 3

B.Detection and Analysis

Question 4

In which phase of an Incident Response Lifecycle would you typically create detailed internal documentation?

A.Preparation
B.Detection and Analysis
C.Containment, Eradication and Recovery
D.Post-mortem

Answer 4

A.Preparation