2023 Latest 100% Exam Passing Ratio - CCAK Dumps PDF
Pass Exam With Full Sureness - CCAK Dumps with 128 Questions
NEW QUESTION 39
In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:
- A. both operating system and application infrastructure contained within the customer's instances
- B. only application infrastructure contained within the CSP's instances.
- C. only application infrastructure contained within the customer's instances.
- D. both operating system and application infrastructure contained within the CSP's instances.
Answer: B
NEW QUESTION 40
A certification target helps in the formation of a continuous certification framework by incorporating:
- A. CSA STAR level 2 attestation.
- B. service level objective and service qualitative objective.
- C. scope description and security attributes to be tested.
- D. frequency of evaluating security attributes.
Answer: B
NEW QUESTION 41
In all three cloud deployment models, (IaaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?
- A. Cloud service provider
- B. Shared responsibility
- C. Cloud service customer
- D. Patching on hypervisor layer is not required
Answer: C
NEW QUESTION 42
What should be the control audit frequency for Business Continuity Management?
- A. Semi-annually
- B. Monthly
- C. Quarterly
- D. Annually
Answer: D
NEW QUESTION 43
A cloud customer configured and developed a solution on top of the certified cloud services. Building on top of a compliant CSP:
- A. means that the cloud customer is also compliant.
- B. means that the cloud customer is compliant but their client is not compliant.
- C. does not necessarily mean that the cloud customer is also compliant.
- D. means that the cloud customer and client are both compliant.
Answer: C
NEW QUESTION 44
All cloud services utilize virtualization technologies.
- A. False
- B. True
Answer: B
NEW QUESTION 45
Which of the following aspects of risk management involves identifying the potential reputational harm and/or financial harm when an incident occurs?
- A. Mitigations
- B. Likelihood
- C. Residual risk
- D. Impact Analysis
Answer: D
NEW QUESTION 46
To support customer's verification of the CSP claims regarding their responsibilities according to the shared responsibility model, which of the following tools and techniques is appropriate?
- A. Security assessment
- B. Internal audit
- C. External audit
- D. Contractual agreement
Answer: A
NEW QUESTION 47
Which of the following has the MOST substantial impact on how aggressive or conservative the cloud approach of an organization will be?
- A. Applicable laws and regulations
- B. Risk scoring criteria
- C. Risk appetite and budget constraints
- D. Internal policies and technical standards
Answer: A
NEW QUESTION 48
Which of the following is a cloud-native solution designed to counter threats that do not exist within the enterprise?
- A. Rule based access control
- B. Attribute based access control
- C. Policy based access control
- D. Role based access control
Answer: A
NEW QUESTION 49
Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system''
- A. System performance may be impacted by the migration
- B. Records past their retention period may not be migrated to the new system
- C. Data from the source and target system may be intercepted
- D. Data from the source and target system may have different data formats
Answer: C
NEW QUESTION 50
What areas should be reviewed when auditing a public cloud?
- A. Vulnerability management, cyber security reviews, patching
- B. Patching, configuration, hypervisor, backups
- C. Identity and access management, data protection
- D. Patching, source code reviews, hypervisor, access controls
Answer: C
NEW QUESTION 51
Account design in the cloud should be driven by:
- A. security requirements.
- B. business continuity policies.
- C. management structure.
- D. organizational structure.
Answer: A
NEW QUESTION 52
Which of the following is a direct benefit of mapping the Cloud Control Matrix (CCM) to other international standards and regulations?
- A. CCM mapping enables cloud service providers and customers alike to streamline their own compliance and security efforts.
- B. CCM mapping enables an uninterrupted data flow and, in particular, the export of personal data across different jurisdictions.
- C. CCM mapping entitles cloud service providers to be certified under the CSA STAR program.
- D. CCM mapping entitles cloud service providers to be listed as an approved supplier for tenders and government contracts.
Answer: A
NEW QUESTION 53
What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?
- A. Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.
- B. Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.
- C. Both B and D.
- D. Maintaining customer managed key management and revoking ordeleting keys from the key management system to prevent the data from being accessed again.
- E. Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.
Answer: D
NEW QUESTION 54
A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?
- A. An access log
- B. An entrylog
- C. A support table
- D. An entitlement matrix
- E. A validation process
Answer: E
NEW QUESTION 55
What should be the auditor's PRIMARY objective while examining a cloud service provider's (CSP's) SLA?
- A. Verifying whether the SLA includes all the operational matters which are material to the operation of the service
- B. Verifying whether the SLA caters to the availability requirements of the cloud service customer (CSC)
- C. Verifying whether commensurate compensation in the form of service credits is factored in if the CSC is unable to match its SLA obligations
- D. Verifying whether the SLAs are well-defined and measurable
Answer: B
NEW QUESTION 56
Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?
- A. Resource Description Framework (RDF)
- B. Software Development Kits (SDKs)
- C. Application Programming Interface (API)
- D. Application Binary Interface (ABI)
- E. Extensible Markup Language (XML)
Answer: C
NEW QUESTION 57
Due to cloud audit team resource constraints, an audit plan as initially approved cannot be completed. Assuming that the situation is communicated in the cloud audit report which course of action is MOST relevant?
- A. Relying on management testing of cloud controls
- B. Testing the adequacy of cloud controls design
- C. Testing the operational effectiveness of cloud controls
- D. Focusing on auditing high-risk areas
Answer: D
NEW QUESTION 58
Due to cloud audit team resource constraints, an audit plan as initially approved cannot be completed.
Assuming that the situation is communicated in the cloud audit report which course of action is MOST relevant?
- A. Relying on management testing of cloud controls
- B. Testing the adequacy of cloud controls design
- C. Testing the operational effectiveness of cloud controls
- D. Focusing on auditing high-risk areas
Answer: D
NEW QUESTION 59
To assist an organization with planning a cloud migration strategy to execution, an auditor should recommend the use of:
- A. software architecture.
- B. service-oriented architecture.
- C. object-oriented architecture.
- D. enterprise architecture.
Answer: B
NEW QUESTION 60
......
Verified CCAK dumps Q&As - 100% Pass from Pass4cram: https://www.pass4cram.com/CCAK_free-download.html
Pass CCAK Exam in First Attempt Guaranteed 2023 Dumps: https://drive.google.com/open?id=1DP3rnh32IrFkebub3WHT9CUASFZFRcib