CSA CCSK Exam - Topic 2 Question 101 Discussion

Actual exam question for CSA's CCSK exam

Question #: 101
Topic #: 2

Which strategic approach is most appropriate for managing a multi-cloud environment that includes multiple IaaS and PaaS providers?

AAllow each department to manage their own cloud services independently.

BUse a single security tool for all providers.

CRely on each provider's native security features with limited additional oversight.

DImplement strict governance and monitoring procedures across all platforms.

Show Suggested Answer

Suggested Answer: D

In amulti-cloud environment, organizations must implementcentralized governance, security policies, and monitoringto:

Ensure complianceacross multiple providers (AWS, Azure, Google Cloud, etc.).

Standardize security policiesto avoid inconsistencies and misconfigurations.

Use Cloud Security Posture Management (CSPM) toolsto automate security compliance and misconfiguration detection.

Prevent cloud sprawlby enforcing identity and access policies across multiple providers.

This aligns with:

CCSK v5 - Security Guidance v4.0, Domain 2 (Governance and Risk Management)

CSA's Cloud Security Alliance (CCM) - Cloud Security Operations Best Practices.

by Annice at May 04, 2026, 02:36 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

17 days ago

I think we practiced a question similar to this, and I recall that relying solely on native features could be risky. So, C seems off to me.

upvoted 0 times

...

22 days ago

I'm not entirely sure, but I feel like allowing departments to manage their own services could lead to security gaps. Maybe A isn't the way to go?

upvoted 0 times

...

27 days ago

I remember discussing the importance of governance in multi-cloud setups, so I think D might be the best choice.

upvoted 0 times

...