Online Access Free CCAK Exam Questions

Which of the following is a good candidate for continuous auditing?

• A.Documentation quality
• B.Cryptography and authentication
• C.Governance
• D.Procedures

Which of the following principles, when combined with a structured development methodology, would BEST contribute to the consistent introduction of secure and compliant Software as a Service (SaaS) solutions in an organization?

• A.Security by design
• B.Least common mechanism
• C.Least privilege
• D.Fail safe defaults

A dot release of the Cloud Controls Matrix (CCM) indicates:

• A.a technical change (revision, addition, or deletion) of a number of controls that is smaller than 10% compared to the previous full release.
• B.a revision of the CCM domain structure.
• C.the introduction of new control frameworks mapped to previously published CCM controls.
• D.technical change (revision, addition, or deletion) of a number of controls that is greater than 10% compared to the previous full release.

A cloud service provider contracts for a penetration test to be conducted on its infrastructures. The auditor engages the target with no prior knowledge of its defenses, assets, or channels. The provider's security operation center is not notified in advance of the scope of the audit and the test vectors. Which mode has been selected by the provider?

• A.Double blind
• B.Reversal
• C.Double gray box
• D.Tandem

Which of the following has the MOST substantial impact on how aggressive or conservative the cloud approach of an organization will be?

• A.Applicable laws and regulations
• B.Internal policies and technical standards
• C.Risk appetite and budget constraints
• D.Risk scoring criteria