Isaca CCAK Practice Test - Questions Answers, Page 5

A Dot Release of Cloud Control Matrix (CCM) indicates what?

What aspect of SaaS functionality and operations would the cloud customer be responsible for and should be audited?

To support customer's verification of the CSP claims regarding their responsibilities according to the shared responsibility model, which of the following tools and techniques is appropriate?

Changes to which of the following will MOST likely influence the expansion or reduction of controls required to remediate the risk arising from changes to an organization's SaaS vendor?

The Cloud Octagon Model was developed to support organizations:

To ensure that integration of security testing is implemented on large code sets in environments where time to completion is critical, what form of validation should an auditor expect?

When performing audits in relation to Business Continuity Management and Operational Resilience strategy, what would be the MOST critical aspect to audit in relation to the strategy of the cloud customer that should be formulated jointly with the cloud service provider?

Which of the following standards is designed to be used by organizations for cloud services that intend to select controls within the process of implementing an

Information Security Management System based on ISO/IEC 27001?

Which of the following aspects of risk management involves identifying the potential reputational harm and/or financial harm when an incident occurs?