Online Access Free CCAK Exam Questions

Regarding cloud service provider agreements and contracts, unless otherwise stated, the provider is:

• A.responsible only to the cloud customer.
• B.responsible to the cloud customer and its end users
• C.responsible to the cloud customer and its clients.
• D.not responsible at all to any external parties.

To BEST prevent a data breach from happening, cryptographic keys should be:

• A.embedded in source code.
• B.transmitted in clear text.
• C.distributed in public-facing repositories.
• D.rotated regularly.

Which of the following cloud service provider activities MUST obtain a client's approval?

• A.Deleting guest accounts
• B.Deleting subscription owner accounts
• C.Deleting test accounts
• D.Destroying test data

Which of the following is an example of availability technical impact?

• A.A distributed denial of service (DDoS) attack renders the customer's cloud inaccessible for 24 hours.
• B.The cloud provider reports a breach of customer personal data from an unsecured server.
• C.A hacker using a stolen administrator identity alters the discount percentage in the product database.
• D.An administrator inadvertently clicked on phish bait, exposing the company to a ransomware attack

A new company has all its operations in the cloud. Which of the following would be the BEST information security control framework to implement?

• A.ISO/IEC 27018
• B.ISO/IEC 27002
• C.(S) Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM)
• D.NIST 800-73, because it is a control framework implemented by the main cloud providers