CCSK Exam QuestionsBrowse all questions from this exam

CCSK Exam - Question 13


A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?

Show Answer
Correct Answer: A

The defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources, is commonly known as an entitlement matrix. An entitlement matrix outlines the various permissions and access levels granted to users, groups, or roles, ensuring that access to resources is managed appropriately based on their defined attributes and claims.

Discussion

10 comments
Sign in to comment
ICEYNYSEOption: A
Nov 5, 2022

It should be entitlement matrix. Validation process is not a terminology

NSK_12Option: A
Oct 14, 2022

Agree, the mapping of an identity to an authorization should be documented in an entitlement matrix. That document outlines the various resources and functions allowed to be used by specific users, groups and roles.

beazzlebubOption: A
Oct 8, 2022

For me this has to be an entitlement matrix. "Validation process" is not even a term that appears in the Security Guidance.

Michael_B_Morell_CISSPOption: A
Dec 10, 2022

Yeah, they messed up here. It is entitlement matrix.

FripperOption: A
Apr 9, 2023

Definitely A. Cannot possibly be D

Selmed993Option: A
Mar 28, 2023

Is it not an entitlement matrix?

Mobi333Option: E
Mar 28, 2023

its E, focus on "entities in a transaction, "

juanescastOption: A
Sep 6, 2023

For me its A, entitlement matrix. but i'm confused for "5.1.2.2 Process. Perform a transaction on the data; update it; use it in a business processing transaction, etc." The questions says "entities in a transaction"

BigG83Option: A
Feb 19, 2024

Absolutely A, Synonym of Entitlement matrix is the Access control list.

assfedassfinishedOption: A
Apr 16, 2024

I haven't come across this info, but it is definitely A.