Question 1

Which meta-phase does the Cloud Security Alliance use to focus on the security and testing activities when

moving code from an isolated development environment to production?

Options :

A :

Secure Networking

B : Secure Scaling

C : Secure Deployment

D : Secure Operations

E :

Secure Design and Development

Answer: C

Question 2

ENISA: Which of the following is among the vulnerabilities contributing to a high risk ranking for Network Management?

Options :

A : User provisioning vulnerabilities

B : AAA vulnerabilities

C : System or O/S vulnerabilities

D : Hypervisor vulnerabilities

E : Inadequate physical security procedures

Answer: C

Question 3

Which type of application security testing tests running applications and includes tests such as web vulnerability testing and fuzzing?

Options :

A : Code Review

B : Static Application Security Testing (SAST)

C : Unit Testing

D : Functional Testing

E : Dynamic Application Security Testing (DAST)

Answer: A

Question 4

In federated identity management, what role does the identity provider (IdP) play in relation to the relying party?

Options :

A : The IdP relies on the relying party to authenticate and authorize users.

B : The relying party makes assertions to the IdP about user authorizations.

C : The IdP and relying party have no direct trust relationship.

D : The IdP makes assertions to the relying party after building a trust relationship.

Answer: D

Question 5

When deploying Security as a Service in a highly regulated industry or environment, what should both parties

agree on in advance and include in the SLA?

Options :

A :

The metrics defining the service level required to achieve regulatory objectives.

B :

The duration of time that a security violation can occur before the client begins assessing regulatory fines.

C :

The cost per incident for security breaches of regulated information.

D : The regulations that are pertinent to the contract and how to circumvent them.

E :

The type of security software which meets regulations and the number of licenses that will be needed.

Answer: A

Confidently Practice Online with Free CCSK Exam Cram

Buying Options: