100% Real CCAK dumps – Brilliant CCAK Exam Questions PDF [Q51-Q66]

4.7/5 - (6 votes)

100% Real CCAK dumps – Brilliant CCAK Exam Questions PDF

CCAK Exam PDF [2022] Tests Free Updated Today with Correct 128 Questions

NEW QUESTION 51
What should be the auditor’s PRIMARY objective while examining a cloud service provider’s (CSP’s) SLA?

Verifying whether commensurate compensation in the form of service credits is factored in if the CSC is unable to match its SLA obligations

Verifying whether the SLA includes all the operational matters which are material to the operation of the service

Verifying whether the SLA caters to the availability requirements of the cloud service customer (CSC)

Verifying whether the SLAs are well-defined and measurable

NEW QUESTION 52
Which objective is MOST appropriate to measure the effectiveness of password policy?

The number of related incidents increases.

Attempts to log with weak credentials increases.

Newly created account credentials satisfy requirements.

The number of related incidents decreases.

NEW QUESTION 53
Sending data to a provider’s storage over an API is likely as much morereliable and secure than setting up your own SFTP server on a VM in the same provider

False

True

NEW QUESTION 54
Which of the following parties should have accountability for cloud compliance requirements?

Customer

Equally shared between customer and provider

Provider

Either customer or provider, depending on requirements

NEW QUESTION 55
When using a SaaS solution, who is responsible for application security?

The cloud service provider only

The cloud service consumer only

Both cloud consumer and the enterprise

Both cloud provider and the consumer

Reference:
%20applications

NEW QUESTION 56
Which of the following controls framework should the cloud customer use to assess the overall security risk of a cloud provider?

SOC3 – Type2

Cloud Control Matrix (CCM)

SOC2 – Type1

SOC1 – Type1

NEW QUESTION 57
CCM: In the CCM tool, ais a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

Risk Impact

Domain

Control Specification

NEW QUESTION 58
When establishing cloud governance, an organization should FIRST test by migrating:

all applications at once to the cloud.

complex applications to the cloud.

legacy applications to the cloud.

a few applications to the cloud.

NEW QUESTION 59
To ensure that integration of security testing is implemented on large code sets in environments where time to completion is critical, what form of validation should an auditor expect?

Parallel testing

Full application stack unit testing

Regression testing

Functional verification

NEW QUESTION 60
A third-party service provider is hosting a private cloud for an organization. Which of the following findings during an audit of the provider poses the GREATEST risk to the organization?

2% of backups had to be rescheduled due to backup media failures.

The organization’s virtual machines share the same hypervisor with virtual machines of other clients.

Two different hypervisor versions are used due to the compatibility restrictions of some virtual machines.

5% of detected incidents exceeded the defined service level agreement (SLA) for escalation.

NEW QUESTION 61
An auditor is performing an audit on behalf of a cloud customer. For assessing security awareness, the auditor should:

assess the existence and adequacy of a security awareness training program at the cloud service provider’s organization as the cloud customer hired the auditor to review and cloud service.

assess the existence and adequacy of a security awareness training program at both the cloud customer’s organization and the cloud service provider’s organization.

assess the existence and adequacy of a security awareness training program at the cloud customer’s organization as they hired the auditor.

not assess the security awareness training program as it is each organization’s responsibility

NEW QUESTION 62
Segregation of duties would be compromised if:

application programmers moved programs into production.

application programmers accessed test data.

database administrators (DBAs) modified the structure of user tables.

operations staff modified batch schedules.

NEW QUESTION 63
Which of the following are the three MAIN phases of the cloud controls matrix (CCM) mapping methodology?

Plan –> Develop –> Release

Deploy –> Monitor –> Audit

Initiation –> Execution –> Monitoring and Controlling

Preparation –> Execution –> Peer Review and Publication

NEW QUESTION 64
Big data includes high volume, high variety, and high velocity.

False

True

NEW QUESTION 65
Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?

Software Development Kits (SDKs)

Resource Description Framework (RDF)

Extensible Markup Language (XML)

Application Binary Interface (ABI)

Application Programming Interface (API)

NEW QUESTION 66
Prioritizing assurance activities for an organization’s cloud services portfolio depends PRIMARILY on an organization’s ability to:

schedule frequent reviews with high-risk cloud service providers.

develop plans using a standardized risk-based approach.

maintain a comprehensive cloud service inventory.

collate views from various business functions using cloud services.

Loading …

Verified & Correct CCAK Practice Test Reliable Source Oct 12, 2022 Updated: https://www.testsimulate.com/CCAK-study-materials.html

Leave a Reply Cancel reply