Certificate of Cloud Security Knowledge (CCSK) — Question 142

CCM: Which of the following statement about CSA's CCM and Security Guidance is False?

Answer options

• A. CSA's CCM provides a set of control objective against which an organization should assess cloud security
• B. CSA's Security Guidance tells you WHAT to do, the CCM tells you HOW to do it
• C. CSAs Security Guidance provides a set of best practices and recommendations
• D. CSA's CCM tells you WHAT to do, the Guidance tells you HOW to do it

Correct answer: B

Explanation

Option B is incorrect because CSA's Security Guidance actually provides the best practices and recommendations (WHAT to do), while the CCM outlines the control objectives (HOW to implement those practices). The other statements accurately describe the roles of the CCM and Security Guidance.