CSA Cert CCSK Practice Exams
Last updated on Oct 22,2026- Exam Code: CCSK
- Exam Name: Certificate of Cloud Security Knowledge
- Certification Provider: CSA Cert
- Latest update: Oct 22,2026
What is the primary purpose of the CSA Security, Trust, Assurance, and Risk (STAR) Registry?
- A . To provide cloud service rate comparisons
- B . To certify cloud services for regulatory compliance
- C . To document security and privacy controls of cloud offerings
- D . To manage data residency and localization requirements
C
Explanation:
The CSA STAR Registry provides transparency by listing security and privacy controls of CSPs, helping customers assess provider security.
Reference: [CCSK Overview, STAR Registry]
The Software Defined Perimeter (SDP) includes which components?
- A . Client, Controller, and Gateway
- B . Client, Controller, Firewall, and Gateway
- C . Client, Firewall, and Gateway
- D . Controller, Firewall, and Gateway
- E . Client, Controller, and Firewall
How does serverless computing impact infrastructure management responsibility?
- A . Requires extensive on-premises infrastructure
- B . Shifts more responsibility to cloud service providers
- C . Increases workload for developers
- D . Eliminates need for cloud service providers
B
Explanation:
Serverless computing shifts infrastructure management responsibility to the CSP, allowing customers to focus on application logic rather than infrastructure.
Reference: [Security Guidance v5, Domain 8 – Cloud Workload Security]
Which type of controls should be implemented when required controls for a cybersecurity
framework cannot be met?
- A . Detective controls
- B . Preventive controls
- C . Compensating controls
- D . Administrative controls
C
Explanation:
Compensating controls are implemented when the required controls for a cybersecurity framework cannot be met due to technical or practical limitations. These controls are alternative measures that provide similar protection or risk mitigation. Compensating controls help to ensure that the security posture remains strong even when the primary controls cannot be applied.
Detective controls focus on identifying security incidents after they occur but do not replace required controls. Preventive controls aim to prevent security incidents from occurring but may not always be possible or practical to implement in certain situations. Administrative controls include policies and procedures but do not address the need for compensating measures when technical controls cannot be met.
Which opportunity helps reduce common application security issues?
- A . Elastic infrastructure
- B . Default deny
- C . Decreased use of micro-services
- D . Segregation by default
- E . Fewer serverless configurations
When configured properly, logs can track every code, infrastructure, and configuration change and connect it back to the submitter and approver, including the test results.
- A . False
- B . True
Which data security control is the LEAST likely to be assigned to an IaaS provider?
- A . Application logic
- B . Access controls
- C . Encryption solutions
- D . Physical destruction
- E . Asset management and tracking
Which feature in cloud enhances security by isolating deployments similar to deploying in distinct data centers?
- A . A single deployment for all applications
- B . Shared deployments for similar applications
- C . Randomized deployment configurations
- D . Multiple independent deployments for applications
D
Explanation:
Multiple independent deployments help isolate workloads, reducing the potential impact of a breach by confining it to a single deployment environment.
Reference: [Security Guidance v5, Domain 7 – Infrastructure & Networking]
In the shared security model, how does the allocation of responsibility vary by service?
- A . Shared responsibilities should be consistent across all services.
- B . Based on the per-service SLAs for security.
- C . Responsibilities are the same across IaaS, PaaS, and SaaS in the shared model.
- D . Responsibilities are divided between the cloud provider and the customer based on the service type.
D
Explanation:
The division of security responsibilities changes according to the service model. In IaaS, CSCs handle more security responsibilities, while in SaaS, the CSP manages more of the security aspects.
Reference: [Security Guidance v5, Domain 1 – Shared Responsibility Model] [17†source].
What item below allows disparate directory services and independent security domains to be
interconnected?
- A . Coalition
- B . Cloud
- C . Intersection
- D . Union
- E . Federation