ExamGecko
Login
Home / Isaca / CCAK / List of questions
Ask Question

Isaca CCAK Practice Test - Questions Answers, Page 10

Add to Whishlist

List of questions

Question 91

Report Export Collapse

Network environments and virtual instances shall be designed and configured to restrict and monitor traffic between trusted and untrusted connections. These configurations shall be reviewed at least annually, and supported by a documented justification for use for all allowed services, protocols, ports, and by compensating controls. Which of the following controls BEST matches this control description?

Become a Premium Member for full access
  Unlock Premium Member

Question 92

Report Export Collapse

Which of the following is a direct benefit of mapping the Cloud Control Matrix (CCM) to other international standards and regulations?

Become a Premium Member for full access
  Unlock Premium Member

Question 93

Report Export Collapse

An auditor is performing an audit on behalf of a cloud customer. For assessing security awareness, the auditor should:

Become a Premium Member for full access
  Unlock Premium Member

Question 94

Report Export Collapse

Which of the following would give an auditor the BEST view of design and implementation decisions when an organization uses programmatic automation for

Infrastructure as a Service (IaaS) deployments? The visibility of:

Become a Premium Member for full access
  Unlock Premium Member

Question 95

Report Export Collapse

If the degree of verification for information shared with the auditor during an audit is low, the auditor should:

Become a Premium Member for full access
  Unlock Premium Member

Question 96

Report Export Collapse

What should be an organization's control audit schedule of a cloud service provider's business continuity plan and operational resilience policy?

Become a Premium Member for full access
  Unlock Premium Member

Question 97

Report Export Collapse

Which of the following would be a logical starting point for an auditor who has been engaged to assess the security of an organization's DevOps pipeline?

Become a Premium Member for full access
  Unlock Premium Member

Question 98

Report Export Collapse

Which of the following CSP activities requires a client's approval?

Become a Premium Member for full access
  Unlock Premium Member

Question 99

Report Export Collapse

An organization has an ISMS implemented, following ISO 27001 and Annex A controls. The CIO would like to migrate some of the infrastructure to the cloud.

Which of the following standards would BEST assist in identifying controls to consider for this migration?

Become a Premium Member for full access
  Unlock Premium Member

Question 100

Report Export Collapse

SAST testing is performed by:

Become a Premium Member for full access
  Unlock Premium Member
Total 195 questions
Go to page: of 20
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Policies and procedures shall be established, and supporting business processes and technical measures implemented, for maintenance of several items ensuring continuity and availability of operations and support personnel. Which of the following controls BEST matches this control description?
An organization deploying the Cloud Control Matrix (CCM) to perform a compliance assessment will encompass the use of the "Corporate Governance Relevance" feature to filter out those controls:
With regard to the Cloud Control Matrix (CCM), the 'Architectural Relevance' is a feature that enables the filtering of security controls by:
A certification target helps in the formation of a continuous certification framework by incorporating:
What is below the waterline in the context of cloud operationalization?
To ensure that cloud audit resources deliver the best value to the organization, the PRIMARY step would be to:
Which statement about compliance responsibilities and ownership of accountability is correct?
A Dot Release of Cloud Control Matrix (CCM) indicates what?
When establishing cloud governance, an organization should FIRST test by migrating:
Which of the following would be a logical starting point for an auditor who has been engaged to assess the security of an organization's DevOps pipeline?