[2022年10月] 厳密検証されたCCSK問題集と解答でCCSK問題集と正解付き [Q10-Q34]

質問10、 APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

質問11、 Which of the following is true after your organization migrates the data to the cloud?

質問12、 Which of the following is correct about Due Care & Due Diligence?

質問13、 Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?

質問14、 An incident in which sensitive, protected or confidential information is released, viewed, stolen or used by an individual who is not authorized to do so, is called:

質問15、 What is defined as the process by which an opposing party may obtain private documents for use in litigation?

質問16、 Which is the leading industry leading standard you will recommend to a web developer when designing web application or an API for a cloud solution?

質問17、 What item below allows disparate directory services and independent security domains to be interconnected?

質問18、 ISO 27001 certification can be taken as proof to achieve Third-party assessment level in CSA star program.

質問19、 Which of following responsibilities can never be transferred. even during cloud adoption?

質問20、 What is a type of computing comparable to grid computing that relies on sharing computing resources rather than having local servers or personal devices to handle applications?

質問21、 ENISA: A reason for risk concerns of a cloud provider being acquired is:

質問22、 Which is the key mechanism used by organisations that supports. assures and demonstrate compliance?

質問23、 Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

質問24、 Which of the following is a form of compliance inheritance and the cloud service provider takes responsibility for the costs and maintenance of certifications for its infrastructure or services?

質問25、 Which form of storage has features are typically minimal. allowing you to only store, retrieve, copy and delete files as well as the ability to control which users can undertake these actions?

質問26、 Due to multi-tenancy nature of cloud. there is the possibility that data belonging to one customer will be read or received by another. This is known as:

質問27、 In 2015, 4 million records were stolen from telecom company, XYZ ltd, and later this information was used for scam calls to get bank information from the customers of XYZ. Which was of the following protection would have helped in minimising impact of the theft?

質問28、 Which of the following are key Data functions?

質問29、 One of the part of STRIDE model is:

質問30、 Which of the following Storage type is NOT associated with SaaS solution?

質問31、 Which is the set of technologies that are designed to detect conditions indicative of a security vulnerability in an application in its running state?

質問32、 Which of the following storage types are associated with PaaS?

質問33、 Who is responsible for Data Security in Software as a Service(SaaS) service mode?

質問34、 Which one of the following is the key tool of Cloud Governance?