CCSI

CCSI Officer course · Final

Practice exam

24 multiple-choice questions covering all ten modules. Answer every question, then submit to see your score and explanations. The pass mark is 80%.

← Syllabus

Exam

This practice exam is a self-assessment and does not award a certificate. The official CCSI Officer certificate is issued only after a proctored assessment arranged through the contact form.

CCSI Officer practice exam

24 questions · pass mark 80%

  1. 1.Confidential computing primarily protects data in which state?

  2. 2.Which party is usually treated as an adversary in a confidential computing threat model, but not in a conventional cloud model?

  3. 3.Which threat is generally OUTSIDE what CPU TEEs are designed to prevent?

  4. 4.What is the main difference between an enclave (e.g. Intel SGX) and a confidential VM (e.g. AMD SEV-SNP, Intel TDX)?

  5. 5.In Intel TDX, what is the protected VM called?

  6. 6.In Arm CCA, what is the protected execution environment called?

  7. 7.According to RFC 9334, which role appraises evidence against policy and reference values?

  8. 8.In the RATS passport model, who forwards the attestation result to the relying party?

  9. 9.Why does a verifier include a nonce in an attestation challenge?

  10. 10.Which check must a verifier always perform on TEE evidence used for production key release?

  11. 11.In AWS Nitro Enclaves, which PCR measures the IAM role of the parent instance?

  12. 12.A Nitro Enclave is started with --debug-mode. What do its attestation document PCRs contain?

  13. 13.What format is the Nitro Enclaves attestation document?

  14. 14.Which AWS KMS condition key corresponds to the enclave image measurement (PCR0)?

  15. 15.In Google Cloud Confidential Space, how does a workload typically obtain access to a data owner's Cloud KMS key?

  16. 16.In Azure secure key release, which service typically issues the attestation token that the key release policy evaluates?

  17. 17.When a Nitro Enclave calls KMS Decrypt with a Recipient parameter, the parent instance relays the response. Why can't the parent read the plaintext?

  18. 18.A KMS key has an attestation-conditioned Allow statement and a separate unconditioned Allow for kms:Decrypt to the same role. What is the effective result?

  19. 19.In NVIDIA H100 confidential computing mode, how is data protected when moving between the confidential VM and the GPU?

  20. 20.Which NVIDIA H100 mode should never process production confidential data?

  21. 21.What lets an independent party confirm a published enclave measurement without trusting your CI system?

  22. 22.A key policy trusts PCR8 (EIF signing certificate) rather than PCR0. What becomes the most critical asset?

  23. 23.After a vendor fixes a TEE vulnerability and the cloud provider has rolled out the fix, what should verifiers do?

  24. 24.A design uses a confidential VM, but SSH is enabled and the operator's service account can read the data keys. What is the officer's conclusion?

0/24 answered