Certificate of Cloud Security Knowledge: CCSK

CCM: In the CCM tool, a _____________________ is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

A. Risk Impact

B. Domain

C. Control Specification

In which deployment model should the governance strategy consider the minimum common set of controls comprised of the Cloud Service Provider contract and the organization's internal governance agreements?

A. Public

B. PaaS

C. Private

D. IaaS

E. Hybrid

ENISA: Because it is practically impossible to process data in encrypted form, customers should have the following expectation of cloud providers:

A. Provider should be PCI compliant

B. Provider should immediately notify customer whenever data is in plaintext form

C. Provider must be highly trustworthy and have compensating controls to protect customer data when it is in plaintext form

D. Provider should always manage customer encryption keys with hardware security module (HSM) storage

E. Homomorphic encryption should be implemented where necessary