Home / Isaca / CCAK

Isaca CCAK Practice Test - Questions Answers, Page 7

Question list

List of questions

Question 61

(0)

Which of the following is MOST important to consider when an organization is building a compliance program for the cloud?

Question 62

(0)

Which of the following is a fundamental concept of FedRAMP that intends to save costs, time, and staff conducting superfluous agency security assessments?

Question 63

(0)

In all three cloud deployment models, (IaaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?

Question 64

(0)

To ensure that cloud audit resources deliver the best value to the organization, the PRIMARY step would be to:

Question 65

(0)

The BEST way to deliver continuous compliance in a cloud environment is to:

Question 66

(0)

Which of the following is an example of integrity technical impact?

Question 67

(0)

Which of the following would be the GREATEST governance challenge to an organization where production is hosted in a public cloud and backups are held on the premises?

Question 68

(0)

A CSP providing cloud services currently being used by the United States federal government should obtain which of the following to assure compliance to stringent government standards?

Question 69

(0)

To qualify for CSA STAR attestation for a particular cloud system, the SOC 2 report must cover:

Question 70

(0)

When a client's business process changes, the CSP SLA should:

Question 61

Which of the following is MOST important to consider when an organization is building a compliance program for the cloud?

The rapidly changing service portfolio and architecture of the cloud.

Cloud providers should not be part of the compliance program.

The fairly static nature of the service portfolio and architecture of the cloud.

The cloud is similar to the on-premise environment in terms of compliance.

Show Answer Comment (0)

Question 62

Which of the following is a fundamental concept of FedRAMP that intends to save costs, time, and staff conducting superfluous agency security assessments?

Use often, provide many times

Be economical, act deliberately

Use existing, provide many times

Do once, use many times

Show Answer Comment (0)

Question 63

In all three cloud deployment models, (IaaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?

Cloud service customer

Shared responsibility

Cloud service provider

Patching on hypervisor layer is not required

Show Answer Comment (0)

Question 64

To ensure that cloud audit resources deliver the best value to the organization, the PRIMARY step would be to:

develop a cloud audit plan on the basis of a detailed risk assessment.

schedule the audits and monitor the time spent on each audit.

train the cloud audit staff on current technology used in the organization.

monitor progress of audits and initiate cost control measures.

Show Answer Comment (0)

Question 65

The BEST way to deliver continuous compliance in a cloud environment is to:

decrease the interval between attestations of compliance.

combine point-in-time assurance approaches with continuous monitoring.

increase the frequency of external audits from annual to quarterly.

combine point-in-time assurance approaches with continuous auditing.

Show Answer Comment (0)

Question 66

Which of the following is an example of integrity technical impact?

The cloud provider reports a breach of customer personal data from an unsecured server.

A hacker using a stolen administrator identity alerts the discount percentage in the product database.

A DDoS attack renders the customer's cloud inaccessible for 24 hours.

An administrator inadvertently clicked on Phish bait exposing his company to a ransomware attack.

Show Answer Comment (0)

Question 67

Which of the following would be the GREATEST governance challenge to an organization where production is hosted in a public cloud and backups are held on the premises?

Aligning the cloud service delivery with the organization's objective

Aligning the cloud provider's SLA with the organization's policy

Aligning shared responsibilities between provider and customer

Aligning the organization's activity with the cloud provider's policy

Show Answer Comment (0)

Question 68

A CSP providing cloud services currently being used by the United States federal government should obtain which of the following to assure compliance to stringent government standards?

Multi-Tier Cloud Security (MTCS) Attestation

FedRAMP Authorization

ISO/IEC 27001:2013 Certification

CSA STAR Level Certificate

Show Answer Comment (0)