Home / Isaca / CCAK

Isaca CCAK Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

As a developer building codes into a container in a DevSecOps environment, which of the following is the appropriate place(s) to perform security tests?

Question 32

(0)

In which control should a cloud service provider, upon request, inform customers of compliance impact and risk, especially if customer data is used as part of the services?

Question 33

(0)

With regard to the Cloud Control Matrix (CCM), the 'Architectural Relevance' is a feature that enables the filtering of security controls by:

Question 34

(0)

What should be the control audit frequency for Business Continuity Management?

Question 35

(0)

The PRIMARY objective of an audit initiation meeting with a cloud audit client is to:

Question 36

(0)

Which of the following key stakeholders should be identified the earliest when an organization is designing a cloud compliance program?

Question 37

(0)

Customer management interface, if compromised over public internet, can lead to:

Question 38

(0)

Which of the following is the BEST recommendation to offer an organization's HR department planning to adopt a new public SaaS application to ease the recruiting process?

Question 39

(0)

Within an organization, which of the following functions should be responsible for defining the cloud adoption approach?

Question 40

(0)

An organization is in the initial phases of cloud adoption. It is not very knowledgeable about cloud security and cloud shared responsibility models. Which of the following approaches is BEST suited

Question 31

As a developer building codes into a container in a DevSecOps environment, which of the following is the appropriate place(s) to perform security tests?

Within developer's laptop

Within the CI/CD server

Within version repositories

Within the CI/CD pipeline

Show Answer Comment (0)

Question 32

In which control should a cloud service provider, upon request, inform customers of compliance impact and risk, especially if customer data is used as part of the services?

Service Provider control

Impact and Risk control

Data Inventory control

Compliance control

Show Answer Comment (0)

Question 33

With regard to the Cloud Control Matrix (CCM), the 'Architectural Relevance' is a feature that enables the filtering of security controls by:

relevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal Enterprise Architecture Framework (FEAF), The Open GroupArchitecture Framework (TOGAF), and the Zachman Framework for Enterprise Architecture.

relevant delivery models such as Software as a Service, Platform as a Service, Infrastructure as a Service.

relevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClient-Backend.

relevant architectural components such as Physical, Network, Compute, Storage, Application, and Data.

Show Answer Comment (0)

Question 34

What should be the control audit frequency for Business Continuity Management?

Quarterly

Annually

Monthly

Semi-annually

Show Answer Comment (0)

Question 35

The PRIMARY objective of an audit initiation meeting with a cloud audit client is to:

select the methodology of the audit.

review requested evidence provided by the audit client.

discuss the scope of the cloud audit.

identify resource requirements of the cloud audit.

Show Answer Comment (0)

Question 36

Which of the following key stakeholders should be identified the earliest when an organization is designing a cloud compliance program?

Cloud process owners

Internal control function

Legal functions

Cloud strategy owners

Show Answer Comment (0)

Question 37

Customer management interface, if compromised over public internet, can lead to:

customer's computing and data compromise.

access to the RAM of neighboring cloud computer.

ease of acquisition of cloud services.

incomplete wiping of the data.

Show Answer Comment (0)

Question 38

Which of the following is the BEST recommendation to offer an organization's HR department planning to adopt a new public SaaS application to ease the recruiting process?

Ensure HIPAA compliance

Implement a cloud access security broker

Consult the legal department

Do not allow data to be in cleratext

Show Answer Comment (0)

Question 39

Within an organization, which of the following functions should be responsible for defining the cloud adoption approach?

Audit committee

Compliance manager

IT manager

Senior management

Show Answer Comment (0)

Question 40

An organization is in the initial phases of cloud adoption. It is not very knowledgeable about cloud security and cloud shared responsibility models. Which of the following approaches is BEST suited for such an organization to evaluate its cloud security?

Use of an established standard/regulation to map controls and use as the audit criteria

For efficiency reasons, use of its on-premises systems' audit criteria to audit the cloud environment

As this is the initial stage, the ISO/IEC 27001 certificate shared by the cloud service provider is sufficient for audit and compliance purposes.

Development of the cloud security audit criteria based on its own internal audit test plans to ensure appropriate coverage

Show Answer Comment (0)

Total 170 questions