The post CCSK has a new version – version 5 ! appeared first on Cloud Security Pass.

Q1 : which statement is correct ?

A : with SaaS you can patch the OS whereas with IaaS you don’t have access to the OS

B : network security groups are only available in PaaS

C : you can’t store data in SaaS, you can only run applications.

D : you get more control and visibility with IaaS compared to SaaS

E : you can’t run a database in PaaS

Q2 : which statement is not correct ? (choose 2)

A : you should prefer VLANs to SDNs

B : you don’t have access to hypervisors in a public cloud

C : privileged accounts should have MFA activated

D : WAF and Security Groups are basically the same thing

E : traditional firewalls won’t work in most cloud environments

Q3 : compliance requirements and data classification are usually not linked

A : true

B : false

Q4 : what is the most relevant for encryption in the cloud ? (choose 2)

A : make sure you have enough separation between the key and the encrypted data

B : make sure the encrypted data is stored in your on-premise environment only

C : make sure you use a reliable and up to date encryption algorithm

D : make sure you always use proxy encryption with SaaS

E : make sure you systematically encrypt everything in IaaS

Q5 : SOC reports are not produced by your Security Operation Center team

A : true

B : false

Q6 : what are the 5 essential characteristics of cloud ?

A : broad network access, rapid elasticity, metered usage, on-demand self-service, resource pooling

B : broad region access, rapid elasticity, metered storage, on-demand self-service, resource balancing

C : broad network access, rapid scalability, metered usage, on-request self-service, resource pooling

D : broad region access, rapid scalability, metered storage, on-request self-service ,resource balancing

Q7 : customer C creates an account on company B’s web site which is a SaaS application deployed in cloud provider A’s IaaS environment. In this scenario:

A : A is the data subject, B the data controller, and C the data processor

B : A and B are data processors and C is the data controller

C : A is the data processor, B the data controller, and C is the data subject

D : A is the data controller, B the data subject, and C is the data processor

E : A an B are data controllers and C is the data subject

Q8 : what does SAST stand for ?

A : Static Authentication Spoofing Threat

B : Static Application Security Testing

C : Software Authorization Spyware Threat

D : Software Assurance Security Testing

Q9 : the right to be forgotten is not covered by GDPR

A : false

B : true

Q10 : what can help with the selection of a cloud provider ? (choose 2)

A : EIP Register

B : Cloud Readiness Assessment Initiative

C : STAR Registry

D : Consensus Assessment Initiative Questionnaire

Q11 : what does CASB stand for ?

A : Cloud Application Security Botnet

B : Cloud Availability and Security Broker

C : Cloud Application Security Bug

D : Cloud Access and Security Broker

Q12 : what deployment model is cloud bursting usually associated with ?

A : Public
B : Hybrid
C : Private
D : Community
E : On-premise

Answers

copy paste the string showing below in a 64 bit decoder and decode it to see the correct answers (there are many 64 bit encoders/decoders available online at no cost) :

UTEgOiBEClEyIDogQSBhbmQgRApRMyA6IEIKUTQgOiBBIGFuZCBDClE1IDogQQpRNiA6IEEKUTcgOiBDClE4IDogQgpROSA6IEEKUTEwIDogQyBhbmQgRApRMTEgOiBEClExMiA6IEI=

interested in preparing for the CCSK exam ?

You can learn more here.

Check the next CCSK training dates here !

The post CCSK practice questions ! appeared first on Cloud Security Pass.

CCSK v4 has 16 domains

1 : cloud computing concepts and architectures

2 : governance and enterprise risk management

3 : legal issues, contracts and electronic discovery

4 : compliance and audit management

5 : information governance

6 : management plane and business continuity

7 : infrastructure security

8 : virtualization and containers

9 : incident response

10 : application security

11 : data security and encryption

12 : identity, entitlement and access management

13 : security as a service

14 : related technologies

15 : cloud control matrix (CCM)

16 : cloud computing risk assessment (ENISA)

CCSK domains scope

When you think about it, this is quite a large range of topics that you need to digest. These domains cover the architectural, legal, risk, compliance, technical, audit, governance and operational aspects of cloud security.

This is the big picture of cloud security. And you need to be fully comfortable with all these domains before you attempt the CCSK exam.

CCSK covers both the tactical and strategic aspects of cloud security, and this is the challenge. You want to master both to be able to pass the exam.

Maybe you are mainly a technical person or you are mainly a business person. Or you have some practical experience with only a few of these domains. Then you’re likely going to expand your knowledge of cloud security by studying for CCSK.

It can be hard work but It will be highly rewarding, considering the current demand for cloud security experts.

As the cloud expands, the need for cloud security skills is getting bigger, and CCSK holders are in high demand. Clearly, you will gain a lot by learning and mastering these domains.

the CCSK exam is challenging

The CCSK exam is open book, but that doesn’t make it easier than a closed book exam.

With 60 questions to answer in 90 minutes, and a passing score of 80% , you will find it very difficult – if not impossible – to search the CCSK documents for every question.

Don’t think you can go there with no or little preparation and figure out the answers on the fly just by searching the documents. You just won’t have enough time.

And even if you can turbo search the CCSK documents at light speed, it won’t work. That’s because the exam questions are not designed in a way that allows you to answer them after a simple search.

To pass the CCSK exam, you really need to master all the CCSK domains, in and out, and in context. There is no quick and easy shortcut.

how to prepare for CCSK

Basically, you have 3 options:

1. self-study : you can download the CCSK self-prep kit and study on your own.

This is a budget-friendly option as the CCSK self-prep kit can be obtained at no cost directly from the Cloud Security Alliance website.

You will still need to purchase a CCSK exam token to take the exam.

2. self-paced : this is ideal if you want to get access to the official CCSK training but your work or personal schedule doesn’t allow you to be away for a few days and attend a live instructor-led training session.

The main benefit is that you study whenever you can and from wherever you can access the self-paced videos.

3. instructor-led : official CCSK training with a CCSK instructor, either online or onsite – probably mainly online at the moment because of the current pandemic.

You can ask your questions directly to the instructor and have them answered during the training session. This is a very efficient way to study and prepare for CCSK.

This is probably the best option. Within a few days and by the end of the live session, most of the cloud security concepts you need to master for the exam will have demystified.

prepare with a CCSK Authorized Instructor

When you register for self-paced or instructor-led training you should always prefer training sessions delivered by CCSK Authorized Instructors.

They are proven cloud security experts with practical experience and they have passed the CCSK exam themselves. In addition they will always teach the most up-to-date CCSK version (version 4.1 at the time of writing).

As a result, you will be thoroughly prepared and your chances of passing the CCSK exam will increase.

the official CCSK training

The official CCSK training comes in 2 forms :

CCSK Foundation covers the theory only – that is all the concepts from all the CCSK domains that you need to master for the exam. You can find all the CCSK Foundation details here .

CCSK Plus covers all the theory just like CCSK Foundation, and it also has hands-on labs (currently on AWS and Azure).

With the hands-on labs you will be able to demonstrate and implement the CCSK concepts in a real cloud environment. This is ideal and recommended if you don’t have any recent cloud experience. You will find all the CCSK Plus details here .

a CCSK exam token is included with the official CCSK Foundation and CCSK Plus trainings.

useful CCSK resources

The Circle CSA community platform has a CCSK Forum here , where you can engage with CCSK holders and CCSK instructors.

Cloud Security Alliance launched this forum in 2020. This is a good place to join if you have CCSK related questions and you need some specific topics to be further clarified.

You will find in this forum discussions on cloud deployment pros and cons , virtualisation components , sql injections , fuzzing , access controls , enterprise risk management , elevation of privilege, and much more.

The domain weights for the CCSK exam are detailed in the Cloud Security Alliance “Roadmap to Earning Your CCSK” article here .

You will also read in this article that only 62% of candidates pass the CCSK exam with just 1 exam token, which confirms CCSK is not an easy exam.

And you can download the CCSK self-prep kit here . It comes with 3 important documents – they form together the 16 CCSK domains :

• Security Guidance for critical areas of focus in cloud computing – version 4
• Cloud Computing – Benefits, risks and recommendations for information security (ENISA)
• Cloud Control Matrix (CCM)

CCSK practice questions

you can try 12 CCSK practice questions here.

conclusion

CCSK is not an easy exam, but with the right focus and the right preparation you can certainly make it to that level of cloud security knowledge that is expected to pass the exam.

You will then become a highly sought after CCSK holder.

Check our CloudSecurityPass training dates here if you are interested in booking a CCSK official training session.

The post is CCSK easy or difficult ? appeared first on Cloud Security Pass.