Examice

Exam CCSK All QuestionsBrowse all questions from this exam

Go to Exam

Question 116

CCM: Which of the following statement about CSA's CCM and Security Guidance is False?

CSA's CCM provides a set of control objective against which an organization should assess cloud security

CSA's Security Guidance tells you WHAT to do, the CCM tells you HOW to do it

CSAs Security Guidance provides a set of best practices and recommendations

CSA's CCM tells you WHAT to do, the Guidance tells you HOW to do it

Correct Answer: B

CSA's Security Guidance provides a set of best practices and recommendations on how to perform cloud security measures, while the Cloud Controls Matrix (CCM) lists specific cloud security controls and maps them to various security and compliance standards, indicating what controls should be implemented. Therefore, it is false to say that the Security Guidance tells you WHAT to do and the CCM tells you HOW to do it.

Discussion

MibuOption: B

Agee with Mial: Statement B is FALSE, statement D is TRUE - therefore the correct choice here is B

MialOption: B

The answer is B - The Cloud Controls Matrix (CCM), lists cloud security controls and maps them to multiple security andcompliance standards. The CCM can also be used to document security responsibilities (WHAT to do).CSA’s Security Guidance provides a set of best practices and recommendations. (HOW to do it).Source: Security Guidance for Critical Areas of Focus in Cloud Computing V4.0