CSA Exam CCSK Topic 5 Question 77 Discussion

Actual exam question for CSA's CCSK exam

Question #: 77
Topic #: 5

CCM: A company wants to use the IaaS offering of some CSP. Which of the following options for using CCM is NOT suitable for the company as a cloud customer?

ASubmit the CCM on behalf of the CSP to CSA Security, Trust & Assurance Registry (STAR), a free, publicly accessible registry that documents the security controls provided by CSPs

BUse CCM to build a detailed list of requirements and controls that they want their CSP to implement

CUse CCM to help assess the risk associated with the CSP

DNone of the above

Show Suggested Answer

Suggested Answer: D

by Marshall at Sep 13, 2024, 09:21 PM

Limited Time Offer

25%

Off

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Franchesca

2 months ago

The company should definitely use CCM to make sure their CSP is up to scratch. Gotta keep those cloud providers on their toes, am I right?

upvoted 0 times

...

Keshia

2 months ago

Haha, 'None of the above' is a classic exam trap answer. Nice try, but I'm not falling for that one!

upvoted 0 times

...

Suzan

2 months ago

I agree. The company should use CCM to assess the risk and build a detailed list of requirements, as described in options B and C.

upvoted 0 times

...

Jerry

2 months ago

Option A is definitely not suitable. Why would the company submit the CCM on behalf of the CSP? That's the CSP's responsibility.

upvoted 0 times

Cristy

8 days ago

Yeah, that would help the company make an informed decision about using the CSP's IaaS offering.

upvoted 0 times

...

Adell

18 days ago

Using CCM to assess the risk associated with the CSP seems like a more appropriate option.

upvoted 0 times

...

Mila

1 months ago

I agree, that doesn't make sense. The CSP should be responsible for submitting their own CCM.

upvoted 0 times

...

Nicholle

1 months ago

Option A is definitely not suitable. Why would the company submit the CCM on behalf of the CSP?

upvoted 0 times

...

Omer

2 months ago

The company should definitely use CCM to make sure their CSP is up to scratch. Gotta keep those cloud providers on their toes, am I right?

upvoted 0 times

Vincenza

1 months ago

Arlette: Absolutely, keeping the cloud providers accountable is key.

upvoted 0 times

...

Arlette

1 months ago

User 2: I agree. It's important to have a detailed list of requirements for the CSP to implement.

upvoted 0 times

...

Terina

1 months ago

Definitely! Using CCM to assess the risk associated with the CSP is crucial.

upvoted 0 times

...

Catalina

2 months ago

Haha, 'None of the above' is a classic exam trap answer. Nice try, but I'm not falling for that one!

upvoted 0 times

...

Veronika

2 months ago

I disagree. Option A could actually be beneficial for the company as it shows transparency and commitment to security.

upvoted 0 times

...

Adela

2 months ago

I agree. The company should use CCM to assess the risk and build a detailed list of requirements, as described in options B and C.

upvoted 0 times

Sharan

1 months ago

User 3: Yeah, using CCM to build a detailed list of requirements is important too.

upvoted 0 times

...

Erin

1 months ago

I agree, but they should also use CCM to assess the risk associated with the CSP.

upvoted 0 times

...

Cristina

1 months ago

So, all the options are suitable for the company as a cloud customer.

upvoted 0 times

...

Markus

1 months ago

Using CCM to assess the risk associated with the CSP is also important.

upvoted 0 times

...

Anthony

1 months ago

I agree, that would be a good way to document the security controls provided by the CSP.

upvoted 0 times

...

Millie

1 months ago

I think the company should submit the CCM on behalf of the CSP to CSA STAR.

upvoted 0 times

...

Tran

2 months ago

I think the company should submit the CCM on behalf of the CSP to CSA STAR.

upvoted 0 times

...

Annice

2 months ago

I agree with Denise. Option A could potentially expose sensitive information to the public.

upvoted 0 times

...

Annamae

2 months ago

Option A is definitely not suitable. Why would the company submit the CCM on behalf of the CSP? That's the CSP's responsibility.

upvoted 0 times

Oretha

2 months ago

Yeah, it's important for the company to use CCM to assess the risk associated with the CSP.

upvoted 0 times

...

Fredric

2 months ago

Fredric is right, that doesn't make sense. The CSP should be responsible for that.

upvoted 0 times

...

Aleisha

2 months ago

Option A is definitely not suitable. Why would the company submit the CCM on behalf of the CSP?

upvoted 0 times

...

Denise

3 months ago

I think option A is not suitable because it involves submitting CCM on behalf of the CSP to a public registry.

upvoted 0 times

...