CSA Cert CCSK Practice Exams
Last updated on Oct 21,2026- Exam Code: CCSK
- Exam Name: Certificate of Cloud Security Knowledge
- Certification Provider: CSA Cert
- Latest update: Oct 21,2026
Any given processor and memory will nearly always be running multiple workloads, often from different tenants.
- A . False
- B . True
What is a cloud workload in terms of infrastructure and platform deployment?
- A . A network of servers connected to execute processes
- B . A collection of physical hardware used to run applications
- C . A single software application hosted on the cloud
- D . Application software deployable on infrastructure/platform
D
Explanation:
A cloud workload refers to the application software or services that are deployed and run on cloud infrastructure or platform. It can include a variety of computing tasks such as processing data,
running applications, or performing computations, depending on the type of workload. Cloud workloads are typically virtualized and managed within cloud environments, utilizing resources like compute, storage, and networking provided by the cloud infrastructure or platform.
A network of servers connected to execute processes refers more to the underlying infrastructure, not the workload itself. A collection of physical hardware used to run applications describes the infrastructure, not the workload. A single software application hosted on the cloud is a partial description but doesn’t capture the broader concept of workloads, which could include multiple services or applications.
When deploying Security as a Service in a highly regulated industry or environment, what should both parties agree on in advance and include in the SLA?
- A . The metrics defining the service level required to achieve regulatory objectives.
- B . The duration of time that a security violation can occur before the client begins assessing regulatory fines.
- C . The cost per incident for security breaches of regulated information.
- D . The regulations that are pertinent to the contract and how to circumvent them.
- E . The type of security software which meets regulations and the number of licenses that will be needed.
What type of information is contained in the Cloud Security Alliance’s Cloud Control Matrix?
- A . Network traffic rules for cloud environments
- B . A number of requirements to be implemented, based upon numerous standards and regulatory requirements
- C . Federal legal business requirements for all cloud operators
- D . A list of cloud configurations including traffic logic and efficient routes
- E . The command and control management hierarchy of typical cloud company
How can web security as a service be deployed for a cloud consumer?
- A . By proxying or redirecting web traffic to the cloud provider
- B . By utilizing a partitioned network drive
- C . On the premise through a software or appliance installation
- D . Both A and C
- E . None of the above
Sending data to a provider’s storage over an API is likely as much more reliable and secure than setting up your own SFTP server on a VM in the same provider
- A . False
- B . True
What should every cloud customer set up with its cloud service provider (CSP) that can be utilized in the event of an incident?
- A . A data destruction plan
- B . A communication plan
- C . A back-up website
- D . A spill remediation kit
- E . A rainy day fund
Which concept focuses on maintaining the same configuration for all infrastructure components, ensuring they do not change once deployed?
- A . Component credentials
- B . Immutable infrastructure
- C . Infrastructure as code
- D . Application integration
B
Explanation:
Immutable infrastructure maintains static configurations after deployment, ensuring consistency and preventing unauthorized changes.
Reference: [Security Guidance v5, Domain 8 – Cloud Workload Security]
CCM: In the CCM tool, ais a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.
- A . Risk Impact
- B . Domain
- C . Control Specification
Which approach creates a secure network, invisible to unauthorized users?
- A . Firewalls
- B . Software-Defined Perimeter (SDP)
- C . Virtual Private Network (VPN)
- D . Intrusion Detection System (IDS)
B
Explanation:
An SDP creates a "dark" network, visible only to authorized users, enhancing security by hiding infrastructure from potential attackers.
Reference: [Security Guidance v5, Domain 7 – Infrastructure & Networking]