CSA Cert CCSK Practice Exams
Last updated on Oct 22,2026- Exam Code: CCSK
- Exam Name: Certificate of Cloud Security Knowledge
- Certification Provider: CSA Cert
- Latest update: Oct 22,2026
Question #211
How does virtualized storage help avoid data loss if a drive fails?
- A . Multiple copies in different locations
- B . Drives are backed up, swapped, and archived constantly
- C . Full back ups weekly
- D . Data loss is unavoidable with drive failures
- E . Incremental backups daily
Correct Answer: A
Question #212
Which cloud storage technology is basically a virtual hard drive for instanced or VMs?
- A . Volume storage
- B . Platform
- C . Database
- D . Application
- E . Object storage
Correct Answer: A
Question #213
Which principle reduces security risk by granting users only the permissions essential for their role?
- A . Role-Based Access Control
- B . Unlimited Access
- C . Mandatory Access Control
- D . Least-Privileged Access
Correct Answer: D
D
Explanation:
The principle of least privilege limits access to only necessary permissions, reducing the risk of misuse and exposure of sensitive data.
Reference: [CCSK v5 Curriculum, Domain 5 – IAM]
D
Explanation:
The principle of least privilege limits access to only necessary permissions, reducing the risk of misuse and exposure of sensitive data.
Reference: [CCSK v5 Curriculum, Domain 5 – IAM]
Question #214
What are the encryption options available for SaaS consumers?
- A . Any encryption option that is available for volume storage, object storage, or PaaS
- B . Provider-managed and (sometimes) proxy encryption
- C . Client/application and file/folder encryption
- D . Object encryption Volume storage encryption
Correct Answer: B
Question #215
Which of the following events should be monitored according to CIS AWS benchmarks?
- A . Regular file backups
- B . Data encryption at rest
- C . Successful login attempts
- D . Unauthorized API calls
Correct Answer: D
D
Explanation:
According to the CIS AWS (Center for Internet Security AWS) benchmarks, unauthorized API calls should be closely monitored because they indicate potential security threats or malicious activity within the AWS environment. Monitoring unauthorized API calls helps detect unauthorized access, misconfigurations, or attempts to exploit cloud resources. It’s a key part of maintaining a secure AWS environment and helps ensure compliance with security best practices.
Regular file backups are important but not specifically a focus of the CIS AWS benchmarks. Data encryption at rest is a security best practice but monitoring unauthorized API calls directly addresses access control and security within the environment. Successful login attempts are important but monitoring failed login attempts (as opposed to successful ones) is generally a better practice for identifying suspicious activity.
D
Explanation:
According to the CIS AWS (Center for Internet Security AWS) benchmarks, unauthorized API calls should be closely monitored because they indicate potential security threats or malicious activity within the AWS environment. Monitoring unauthorized API calls helps detect unauthorized access, misconfigurations, or attempts to exploit cloud resources. It’s a key part of maintaining a secure AWS environment and helps ensure compliance with security best practices.
Regular file backups are important but not specifically a focus of the CIS AWS benchmarks. Data encryption at rest is a security best practice but monitoring unauthorized API calls directly addresses access control and security within the environment. Successful login attempts are important but monitoring failed login attempts (as opposed to successful ones) is generally a better practice for identifying suspicious activity.
Question #216
Containers are highly portable code execution environments.
- A . False
- B . True
Correct Answer: B
Question #217
How is encryption managed on multi-tenant storage?
- A . Single key for all data owners
- B . One key per data owner
- C . Multiple keys per data owner
- D . The answer could be A, B, or C depending on the provider
- E . C for data subject to the EU Data Protection Directive; B for all others
Correct Answer: B
Question #218
Which of the following is the MOST common cause of cloud-native security breaches?
- A . Inability to monitor cloud infrastructure for threats
- B . IAM failures
- C . Lack of encryption for data at rest
- D . Vulnerabilities in cloud provider’s physical infrastructure
Correct Answer: B
B
Explanation:
IAM failures are a leading cause of cloud-native breaches, often due to misconfigurations or inadequate access control mechanisms.
Reference: [Security Guidance v5, Domain 5 – IAM]
B
Explanation:
IAM failures are a leading cause of cloud-native breaches, often due to misconfigurations or inadequate access control mechanisms.
Reference: [Security Guidance v5, Domain 5 – IAM]
Question #219
Which of the following best describes a key aspect of cloud risk management?
- A . A structured approach for performance optimization of cloud services
- B . A structured approach to identifying, assessing, and addressing risks
- C . A structured approach to establishing the different what/if scenarios for cloud vs on-premise decisions
- D . A structured approach to SWOT analysis
Correct Answer: B
B
Explanation:
A key aspect of cloud risk management is taking a structured approach to identify, assess, and address risks related to using cloud services. This includes evaluating potential risks such as security vulnerabilities, data privacy issues, service outages, and compliance challenges. Effective risk management helps organizations proactively mitigate potential threats, ensuring the cloud environment is secure, compliant, and resilient.
A structured approach for performance optimization of cloud services is more related to performance management, not risk management. A structured approach to establishing the different what/if scenarios for cloud vs on-premise decisions refers to decision-making scenarios, not the identification and management of risks. A structured approach to SWOT analysis) is a strategic planning tool that focuses on strengths, weaknesses, opportunities, and threats, but it is not specifically focused on cloud risk management.
B
Explanation:
A key aspect of cloud risk management is taking a structured approach to identify, assess, and address risks related to using cloud services. This includes evaluating potential risks such as security vulnerabilities, data privacy issues, service outages, and compliance challenges. Effective risk management helps organizations proactively mitigate potential threats, ensuring the cloud environment is secure, compliant, and resilient.
A structured approach for performance optimization of cloud services is more related to performance management, not risk management. A structured approach to establishing the different what/if scenarios for cloud vs on-premise decisions refers to decision-making scenarios, not the identification and management of risks. A structured approach to SWOT analysis) is a strategic planning tool that focuses on strengths, weaknesses, opportunities, and threats, but it is not specifically focused on cloud risk management.
Question #220
The containment phase of the incident response lifecycle requires taking systems offline.
- A . False
- B . True
Correct Answer: B