Which of the following best describes the primary benefit of utilizing cloud telemetry sources in cybersecurity?
Answer(s): B
Cloud telemetry provides detailed insights and visibility into security events and system behaviors in cloud environments, which helps detect and respond to threats.
[Security Guidance v5, Domain 6 - Security Monitoring]
How does the variability in Identity and Access Management (IAM) systems across cloud providers impact a multi-cloud strategy?
Answer(s): A
Each cloud provider may use different IAM protocols and configurations, increasing complexity and requiring customized integration for each cloud environment.
[CCSK Study Guide, Domain 5 - Identity and Access Management]
In the shared security model, how does the allocation of responsibility vary by service?
Answer(s): D
The division of security responsibilities changes according to the service model. In IaaS, CSCs handle more security responsibilities, while in SaaS, the CSP manages more of the security aspects.
[Security Guidance v5, Domain 1 - Shared Responsibility Model][17source].
How can Identity and Access Management (IAM) policies on keys ensure adherence to the principle of least privilege?
Answer(s): C
Fine-grained permissions enable specific control over who can access certain resources, thus enforcing the least privilege principle.
[Security Guidance v5, Domain 5 - IAM]
What is the primary purpose of the CSA Security, Trust, Assurance, and Risk (STAR) Registry?
The CSA STAR Registry provides transparency by listing security and privacy controls of CSPs, helping customers assess provider security.
[CCSK Overview, STAR Registry]
Post your Comments and Discuss CSA CCSK exam prep with other Community members: