Discuss CSA CCSK Exam Topic 2 Question 101

Which strategic approach is most appropriate for managing a multi-cloud environment that includes multiple IaaS and PaaS providers?

AAllow each department to manage their own cloud services independently.

BUse a single security tool for all providers.

CRely on each provider's native security features with limited additional oversight.

DImplement strict governance and monitoring procedures across all platforms.

Suggested Answer: D

In amulti-cloud environment, organizations must implementcentralized governance, security policies, and monitoringto:

Ensure complianceacross multiple providers (AWS, Azure, Google Cloud, etc.).

Standardize security policiesto avoid inconsistencies and misconfigurations.

Use Cloud Security Posture Management (CSPM) toolsto automate security compliance and misconfiguration detection.

Prevent cloud sprawlby enforcing identity and access policies across multiple providers.

This aligns with:

CCSK v5 - Security Guidance v4.0, Domain 2 (Governance and Risk Management)

CSA's Cloud Security Alliance (CCM) - Cloud Security Operations Best Practices.

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Maurine 2 days ago

A might create silos. Collaboration is essential.

Shannan 7 days ago

D provides oversight. We need that in a multi-cloud setup.

Josphine 12 days ago

C sounds risky. Relying solely on native features is dangerous.

Floyd 17 days ago

B is too limiting. A single tool can't cover all needs.

Elza 23 days ago

A could lead to chaos. Departments might not coordinate well.

Shala 28 days ago

I agree, D ensures consistency across platforms.

Adela 1 month ago

I think D is the best choice. Governance is key.

Sharan 1 month ago

D also helps in compliance. Very important!

Catarina 1 month ago

A could create silos. We need collaboration.

Tracey 2 months ago

D provides a safety net. Monitoring is essential!

Melissa 2 months ago

C is risky. Relying solely on native features could backfire.

Lorean 2 months ago

B sounds good, but one tool might not cover all needs.

Rosio 2 months ago

A could lead to chaos. Departments might not align.

Wynell 2 months ago

I agree, D ensures consistency across platforms.

Farrah 2 months ago

I think D is the best choice. Governance is key.

Kerry 3 months ago

D ensures accountability, can’t go wrong with that!

Martina 3 months ago

Wait, relying on native features? That seems too trusting!

Marylyn 3 months ago

I think B could lead to gaps in security coverage.

Junita 3 months ago

A sounds risky, departments might not coordinate well.

Alona 3 months ago

D is definitely the way to go for consistency.

Isidra 4 months ago

Using a single security tool sounds convenient, but I wonder if it would really cover all bases. I guess B could be limiting in a multi-cloud scenario.

Colette 5 months ago

I think we practiced a question similar to this, and I recall that relying solely on native features could be risky. So, C seems off to me.

Joanna 5 months ago

I'm not entirely sure, but I feel like allowing departments to manage their own services could lead to security gaps. Maybe A isn't the way to go?

Meaghan 5 months ago

I remember discussing the importance of governance in multi-cloud setups, so I think D might be the best choice.

CSA CCSK Exam - Topic 2 Question 101 Discussion