Online Access Free ISACA.CCAK.v2024-05-13.q102 Practice Test (Page 4)

CCAK Exam Question 11

When deploying Security as a Service in a highly regulated industry or environment, what should bothparties agree on in advance and include in the SLA?

A.The type of security software which meets regulations and the number of licenses that will be needed.

B.The duration of time that a security violation can occur before the client begins assessing regulatory fines.

C.The metrics defining the service level required to achieve regulatory objectives.

D.The regulations that are pertinent to the contract and how to circumvent them.

E.The cost per incident for security breaches of regulated information.

CCAK Exam Question 12

With regard to the Cloud Control Matrix (CCM), the 'Architectural Relevance' is a feature that enables the filtering of security controls by:

A.relevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClient-Backend.

B.relevant delivery models such as Software as a Service, Platform as a Service, Infrastructure as a Service.

C.relevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal Enterprise Architecture Framework (FEAF), The Open Group Architecture Framework (TOGAF), and the Zachman Framework for Enterprise Architecture.

D.relevant architectural components such as Physical, Network, Compute, Storage, Application, and Data.

CCAK Exam Question 13

The BEST way to deliver continuous compliance in a cloud environment is to:

A.combine point-in-time assurance approaches with continuous monitoring.

B.increase the frequency of external audits from annual to quarterly.

C.combine point-in-time assurance approaches with continuous auditing.

D.decrease the interval between attestations of compliance

CCAK Exam Question 14

Changes to which of the following will MOST likely influence the expansion or reduction of controls required to remediate the risk arising from changes to an organization's SaaS vendor?

A.Board oversight

B.Contractual requirements

C.Risk exceptions policy

D.Risk appetite

CCAK Exam Question 15

An auditor identifies that a CSP received multiple customer inquiries and RFPs during the last month. Which of the following should be the BEST recommendation to reduce the CSP burden?

A.CSP can direct all customers' inquiries to the information in the CSA STAR registry.

B.CSP can share all security reports with customers to streamline the process.

C.CSP can schedule a call with each customer.

D.CSP can answer each customer individually.

Other Version: 975ISACA.CCAK.v2025-08-01.q91; 521ISACA.CCAK.v2024-10-10.q64; 1436ISACA.CCAK.v2022-04-09.q55; 110ISACA.Braindumpspass.CCAK.v2022-01-26.by.thomas.55q.pdf

Latest Upload: 119SAP.C_BCBAI_2509.v2026-01-15.q13; 188DAMA.DMF-1220.v2026-01-15.q271; 138SAP.C_SIGDA_2403.v2026-01-15.q66; 175ISACA.CRISC.v2026-01-15.q649; 128PaloAltoNetworks.NetSec-Pro.v2026-01-15.q26; 170Splunk.SPLK-1002.v2026-01-14.q121; 170EMC.NCP-AII.v2026-01-14.q144; 164Microsoft.AZ-800.v2026-01-13.q144; 176Microsoft.MS-102.v2026-01-13.q258; 121HP.HPE2-E84.v2026-01-13.q17

CCAK Exam Question 11

CCAK Exam Question 12

CCAK Exam Question 13

CCAK Exam Question 14

CCAK Exam Question 15

Download PDF File