A company wants to migrate its existing on-premises ERP system to the cloud with minimal customization required. The IT team wants the vendor to handle all maintenance, patching, and infrastructure management. Which cloud service model is MOST appropriate?
Ccsk Cloud Computing Concepts Architectures
Question · Medium
What if a whole datacenter went dark?
Short
FREE CCSK Exam Guide 2026: CSA v5 Cloud Security Prep
A 2026 CCSK v5 guide for cloud security candidates: open-book strategy, 60-question format, 80% passing score, domain priorities, and free practice.
Blog
What are the five essential characteristics of cloud computing defined in NIST SP 800-145?
Cloud Computing Concepts & Architectures
Flashcard
In which cloud service model does the cloud provider manage the operating system, middleware, and runtime, while the customer is responsible only for the application and data?
Ccsk Cloud Governance
Question · Easy
Model in which the consumer only uses the provider's applications running on cloud infrastructure, reachable through a web browser or program interface, and does not manage the underlying network, servers, operating systems, or storage.
Cloud computing concepts
Guess the Term
Chapter 1: CCSK Exam Overview & CSA Security Frameworks
1.1 CCSK v5 Exam Structure, Logistics & Open-Book Strategy
Study guide
Cheat sheet
Which U.S. government program provides standardized security assessments and authorizations for cloud services used by federal agencies?
Ccsk Risk Audit Compliance
Read the clue and guess the term in 6 tries.
Game
How do the three NIST SP 800-145 cloud service models (IaaS, PaaS, SaaS) differ in abstraction and consumer control?
An organization is planning a cloud migration using the "7 Rs" framework. They want to move an application to the cloud with minimal changes while optimizing costs. Which migration strategy BEST fits this scenario?
Ccsk Organization Management
Question · Hard
Kind of cloud composed of two or more distinct cloud infrastructures, private, community, or public, that remain unique entities but are bound together by standardized or proprietary technology enabling data and application portability.
Which authentication protocol is MOST commonly used for Single Sign-On (SSO) in cloud environments and is based on XML?
Ccsk Identity Access Management
Public, private or hybrid cloud?
What are the four cloud deployment models in NIST SP 800-145, and what distinguishes each?
Which approach to log management in multi-cloud environments provides the MOST comprehensive visibility for security analysis?
Ccsk Security Monitoring
CSA's cybersecurity framework of 197 objectives structured in 17 domains, supporting systematic assessment of a provider's implementation and showing which actor in the supply chain should implement which safeguards.
Cloud governance
1.2 CCSK v5 Source Hierarchy & CSA Cloud Architecture
Which cloud architecture principle involves distributing application components across multiple availability zones to ensure high availability?
Ccsk Infrastructure Networking
Swap tiles to line up three of the same term.
Term Match
How does the Shared Responsibility Matrix allocate security duties across IaaS, PaaS, and SaaS?
What is the PRIMARY security concern when multiple virtual machines from different tenants run on the same physical host in a public cloud?
Ccsk Cloud Workload Security
CSA program with a public registry of provider listings; Level 1 is self-assessment via the CAIQ, and Level 2 is a third-party audit, such as ISO/IEC 27001 certification or SOC 2 attestation.
Risk and compliance
Which data classification level typically includes data that, if disclosed, could cause serious harm to an organization, its customers, or partners?
Ccsk Data Security
AWS or YOU?
What is the cloud management plane, and why can a privileged management identity expose many resources?
Which technique involves analyzing source code or compiled code to identify security vulnerabilities without executing the application?
Ccsk Application Security
CSA's yes/no provider-evaluation form derived from the CCM; submitting it is how a provider earns a Level 1 listing in the public registry.
1.3 CSA Assurance Tools: CCM v4.1, CAIQ v4.1 & the STAR Registry
What is the PRIMARY challenge of performing digital forensics in a cloud environment compared to traditional on-premises infrastructure?
Ccsk Incident Response Resilience
Flip two cards at a time to find matching terms.
Term Pairs
What is the relationship between cloud governance, enterprise risk management, and cloud contracts/SLAs?
Cloud Governance
Which cloud service component is MOST important for collecting and analyzing security events from multiple cloud resources in a centralized manner?
Ccsk Related Technologies Strategies
Multi-___ model: how a cloud provider pools computing resources to serve many consumers, assigning and reassigning physical and virtual resources by demand.
Organization management
A government agency requires complete physical isolation of its cloud infrastructure for handling classified information. No other tenants should share the same physical hardware. Which deployment model meets this requirement?
How do data residency, data sovereignty, and cloud e-discovery create legal challenges in multi-regional cloud deployments?
In a Platform as a Service (PaaS) model, which security responsibility PRIMARILY shifts from the cloud service provider to the customer compared to Infrastructure as a Service (IaaS)?
Kind of sign-in requiring more than one distinct type of proof, for example a cryptographic device activated by an integrated biometric sensor, for the login to succeed.
Identity and access
Chapter 2: Cloud Computing Concepts & Architectures
2.1 Cloud Definition, Essential Characteristics & ISO/IEC Standards
Which US federal framework provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services used by federal agencies?
Find five hidden terms in a grid of letters.
Term Search
What is the CSA Cloud Controls Matrix (CCM), and how is it used in cloud governance?
Which element of a cloud service contract is MOST critical for ensuring the provider's accountability for data breaches caused by their negligence?
Authorization model in which subjects are assigned to pre-defined job functions that carry specific sets of privileges; a Manager reaches different objects than an Analyst.
Loading more…