ExamGecko
Login
Home / Isaca / CCAK / List of questions
Ask Question

Isaca CCAK Practice Test - Questions Answers, Page 19

Add to Whishlist

List of questions

Question 181

Report Export Collapse

Management planes deployed in cloud environments may pose a risk of potentially allowing access to the entire environment. Which of the following controls is MOST appropriate for mitigating this risk?

Become a Premium Member for full access
  Unlock Premium Member

Question 182

Report Export Collapse

The Cloud Computing Compliance Controls Catalogue (C5) framework is maintained by which of the following agencies?

Become a Premium Member for full access
  Unlock Premium Member

Question 183

Report Export Collapse

Which of the following are independent assessment organizations that verify cloud providers' security implementations and provide the overall risk posture of a cloud environment for a FedRAMP security authorization decision?

Become a Premium Member for full access
  Unlock Premium Member

Question 184

Report Export Collapse

'Policies and procedures shall be established, and supporting business processes and technical measures implemented, for maintenance of several items ensuring continuity and availability of operations and support personnel.' Which of the following types of controls BEST matches this control description?

Become a Premium Member for full access
  Unlock Premium Member

Question 185

Report Export Collapse

A large healthcare provider within the United States is seeking a cloud service provider offering Software as a Service (SaaS) for core business systems. The selected provider MUST comply with which of the following regulations?

Become a Premium Member for full access
  Unlock Premium Member

Question 186

Report Export Collapse

Which of the following is a tool that visually depicts the gaps in an organization's security capabilities?

Become a Premium Member for full access
  Unlock Premium Member

Question 187

Report Export Collapse

Which of the following configuration change controls is acceptable to a cloud auditor?

Become a Premium Member for full access
  Unlock Premium Member

Question 188

Report Export Collapse

The MAIN difference between the Cloud Controls Matrix (CCM) and the Consensus Assessment Initiative Questionnaire (CAIQ) is that:

Become a Premium Member for full access
  Unlock Premium Member

Question 189

Report Export Collapse

The control domain feature within a Cloud Controls Matrix (CCM) represents:

Become a Premium Member for full access
  Unlock Premium Member

Question 190

Report Export Collapse

Account design in the cloud should be driven by:

Become a Premium Member for full access
  Unlock Premium Member
Total 195 questions
Go to page: of 20
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Policies and procedures shall be established, and supporting business processes and technical measures implemented, for maintenance of several items ensuring continuity and availability of operations and support personnel. Which of the following controls BEST matches this control description?
An organization deploying the Cloud Control Matrix (CCM) to perform a compliance assessment will encompass the use of the "Corporate Governance Relevance" feature to filter out those controls:
With regard to the Cloud Control Matrix (CCM), the 'Architectural Relevance' is a feature that enables the filtering of security controls by:
A certification target helps in the formation of a continuous certification framework by incorporating:
What is below the waterline in the context of cloud operationalization?
To ensure that cloud audit resources deliver the best value to the organization, the PRIMARY step would be to:
Which statement about compliance responsibilities and ownership of accountability is correct?
A Dot Release of Cloud Control Matrix (CCM) indicates what?
When establishing cloud governance, an organization should FIRST test by migrating:
Which of the following would be a logical starting point for an auditor who has been engaged to assess the security of an organization's DevOps pipeline?