Online Access Free CCAK Exam Questions

Which of the following principles, when combined with a structured development methodology, would BEST contribute to the consistent introduction of secure and compliant Software as a Service (SaaS) solutions in an organization?

• A.Fail safe defaults
• B.Security by design
• C.Least privilege
• D.Least common mechanism

Which of the following metrics are frequently immature?

• A.Metrics around Infrastructure as a Service (laaS) storage and network environments
• B.Metrics around specific Software as a Service (SaaS) application services
• C.Metrics around Infrastructure as a Service (laaS) computing environments
• D.Metrics around Platform as a Service (PaaS) development environments

A certification target helps in the formation of a continuous certification framework by incorporating:

• A.the service level objective (SLO) and service qualitative objective (SQO).
• B.the frequency of evaluating security attributes.
• C.CSA STAR level 2 attestation.
• D.the scope description and security attributes to be tested.

What aspect of Software as a Service (SaaS) functionality and operations would the cloud customer be responsible for and should be audited?

• A.Vulnerability management
• B.Patching
• C.Source code reviews
• D.Access controls

What areas should be reviewed when auditing a public cloud?

• A.Source code reviews and hypervisor
• B.Patching and configuration
• C.Identity and access management (IAM) and data protection
• D.Vulnerability management and cyber security reviews