CCSK練習問題集で検証済みで更新された179問題あります
更新されたCCSK試験問題集でPDF問題とテストエンジン
Cloud Security Alliance (CSA) は、ビジネスや個人のクラウドコンピューティング利用を促進することを目的とした非営利団体です。CSA が推進する最も重要なイニシアチブの1つが、Certificate of Cloud Security Knowledge (CCSK) 試験の開発です。CCSK は、クラウドベースのインフラストラクチャとアプリケーションのセキュリティを担当する個人の知識とスキルを試験するための認定試験です。
質問 # 100
What tool allows teams to easily locate and integrate with approved cloud services?
- A. Contracts
- B. Service Registry
- C. Shared Responsibility Model
- D. Risk Register
正解：B
解説：
A Service Registry lists approved services, making it easy for teams to find and integrate compliant services.
Reference: [CCSK Knowledge Guide, Domain 3 - Risk and Compliance Tools]
質問 # 101
The granting of right to access to a user. program or process. is called:
- A. Entitlement
- B. Authorization
- C. RBAC
- D. Authentication
正解：B
解説：
Authorization is the process of granting of right to access to a user, program or process. It should not be confused with Authentication.
質問 # 102
One of the primary benefits of the cloud is the ability to perform dynamic allocation of physical resources when required. The most common approach is a multi-tenant environment. However, it increases risk of disclosure of customer dat a. This can happen because of which of the following?
- A. Isolation Failure
- B. Tenancy termination
- C. Increased DDoS
- D. No disaster recovery plan
正解：A
解説：
All resources allocated to a particular tenant should be "isolated" and protected to avoid disclosure of information to other tenants For example, when allocated storage is no longer needed IIS Security Considerations for Cloud Computing by a client it can be freely reallocated to another enterprise. ln that case, sensitive data could be disclosed if the storage has not been scrubbed thoroughly(e.g, using forensic software).
質問 # 103
The ability of a cloud services datacentre and its associated components. including servers. storage. and so on. to continue operating in the event of a disruption. which may be equipment failure. power outage. or a natural disaster. known as:
- A. Redundancy
- B. Continuity
- C. Resiliency
- D. Disaster recovery
正解：C
解説：
Resiliency is the correct answer but other options look very similar and is provided to create confusion.
One need to be careful while answering the question.
Resiliency is often confused with redundancy, Key difference is
A redundant system includes multiple channels to provide alternate paths for communications in case of individual failures.
... Resilience, on the other hand, refers to a system's ability to adapt to failures and to resume normal operations when the failure has been resolved.
質問 # 104
Which form of storage has features are typically minimal. allowing you to only store, retrieve, copy and delete files as well as the ability to control which users can undertake these actions?
- A. Volume Storage
- B. Block Storage
- C. Ephemeral Storage
- D. Object Storage
正解：D
解説：
Object Storage has features are typically minimal, allowing you to only store, retrieve, copy, and delete files as well as the ability to control which users can undertake these actions.
質問 # 105
An important consideration when performing a remote vulnerability test of a cloud-based application is to
- A. Use techniques to evade cloud provider's detection systems
- B. Obtain provider permission for test
- C. Use application layer testing tools exclusively
- D. Schedule vulnerability test at night
- E. Use network layer testing tools exclusively
正解：B
質問 # 106
Which one of the following is not a risk mitigation strategy?
- A. Avoidance
- B. Acceptance
- C. Transfer
- D. Suppression
正解：D
解説：
Following are the risk mitigation strategies
質問 # 107
Code execution environments that run within an operating system. sharing and leveraging resources of that operating system is called :
- A. Virtual Machine
- B. Sandbox
- C. Instance
- D. Container
正解：D
解説：
Containers are code execution environments that run within an operating system(for now), sharing and leveraging resources of that operating system. While a VM is a full abstraction of an operating system, a container is a constrained place to run segregated processes while still utilizing the kernel and other capabilities of the base 0S. Multiple containers can run on the same virtual machine or be implemented without the use of VMs at all and run directly on hardware.
Reference: CSA Security Guidelines V.4(reproduced here for the educational purpose)
質問 # 108
Vulnerability assessments cannot be easily integrated into CI/CD pipelines because of provider restrictions.
- A. False
- B. True
正解：A
質問 # 109
Who is responsible for Governance, Risk & Compliance in Software as a Service(SaaS) service model?
- A. Cloud Carrier
- B. It's a shared responsibility between Cloud Service Provider and Cloud Customer
- C. Cloud Customer
- D. Cloud Service Provider
正解：C
解説：
Remember, GRC will always remain responsibility of the cloud customer in all service models
質問 # 110
Which one of the following is the key tool of Cloud Governance?
- A. Data classification
- B. Auditor Selection
- C. Business Impact Analysis(BIA)
- D. Contracts
正解：D
解説：
The primary tool of governance is the contract between a cloud provider and a cloud customer (this is true for public and private cloud). The contract is your only guarantee of any level of service or commitment Ref: CSA Security Guidance V4.0
質問 # 111
Security Governance, Risk and Compliance(GRC) is, generally, responsibility of which of the following across all the platforms (IaaS, PaaS and SaaS)?
- A. Shared responsibility
- B. Cloud Service Provider
- C. Customer
- D. Joint Responsibility
正解：C
解説：
GRC is responsibility of the customer across all service models.
質問 # 112
Object storage unsuitable for data that changes frequently, Is it true?
- A. False, Object storage is suitable for all type of data
- B. True, because whenever you update a file you may have to wait until the change is propagated to all the replicas before requests return the latest version
- C. False, because change in one replica will also return latest version irrespective of its location
- D. True, because data is geographically disperse and cannot be replicated
正解：B
解説：
With object storage systems, data consistency is achieved eventually. Whenever you update a file, you may have to wait until the change is propagated to all the replicas before requests return the latest version.
質問 # 113
Which of the following is the key difference between cloud computing and traditional virtualization?
- A. Abstraction
- B. Classification
- C. Orchestration
- D. Isolation
正解：C
解説：
Orchestration is the difference between cloud computing and traditional virtualization; virtualization abstracts resources. but it typically lacks the orchestration to pool them together and deliver them to customers on demand. instead relying on manual processes.
Ref: CSA Security Guidelines V4.0
質問 # 114
One of key focus of ISO 27001 standard is:
- A. Put security controls in place
- B. Define organizational structure
- C. Find the data breaches in the organization
- D. Develop ISMS (Information Security management system)
正解：D
解説：
ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS).
An ISMS is a systematic approach to managing sensitive company information so that it remains secure.
It includes people, processes and IT systems by applying a risk management process.
質問 # 115
Which of the following establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information(PII) in accordance with the privacy principles in IS0/IEC 29100 for the public cloud computing environment?
- A. IS0 27017
- B. IS0 27018
- C. IS0 27032
- D. IS0 27034
正解：B
解説：
IS0/IEC 27018:2014 establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information(PII) in accordance with the privacy principles in IS0/IEC 29100 for the public cloud computing environment.
質問 # 116
Term which defined acquired IT Technologies without the knowledge of IT Department is:
- A. Shadow devices
- B. Shadow application
- C. Shadow IT
- D. Shadow servers
正解：C
解説：
Shadow IT is a term often used to describe information-technology systems and solutions built and used inside organizations without explicit organizational approval.
質問 # 117
......
CCSK認定プログラムは、特定のクラウドプラットフォームや技術に結び付けられていないベンダーニュートラルなものであり、クラウドセキュリティに関する理解を深め、最新のベストプラクティスについて最新情報を得たいセキュリティ専門家、ITアーキテクト、およびクラウドサービスプロバイダに適しています。この試験はオンラインで実施され、60の多肢選択問題から成り、90分で完了する必要があります。合格後、個人はクラウドセキュリティ知識における熟練度を示す証明書を受け取り、3年間有効です。
最新（2025)Cloud Security Alliance CCSK試験問題集：https://www.jpntest.com/shiken/CCSK-mondaishu
最適な練習法にはCloud Security Alliance CCSK試験の素晴らしいCCSK試験問題PDF：https://drive.google.com/open?id=19Fn5Z9l621p7BXGCcdGaMgRnk0F9Zs2O