Isaca CCAK Online Practice Questions and Exam Preparation

Isaca CCAK Online Questions & Answers

• Question 161:

  Which of the following is MOST important to ensure effective cloud application controls are maintained in an organization?

  A. Control self-assessment (CSA)
  B. Third-party vendor involvement
  C. Exception reporting
  D. Application team internal review
  C. Exception reporting

• Question 162:

  What does "The Egregious 11" refer to?

  A. The OWASP Top 10 adapted to cloud computing
  B. A list of top shortcomings of cloud computing
  C. A list of top breaches in cloud computing
  D. A list of top threats to cloud computing
  D. A list of top threats to cloud computing

• Question 163:

  Which of the following is the risk associated with storing data in a cloud that crosses jurisdictions?

  A. Compliance risk
  B. Provider administration risk
  C. Audit risk
  D. Virtualization risk
  A. Compliance risk

• Question 164:

  Regarding suppliers of a cloud service provider, it is MOST important for the auditor to be aware that the:

  A. client organization does not need to worry about the provider's suppliers, as this is the provider's responsibility.
  B. suppliers are accountable for the provider's service that they are providing.
  C. client organization and provider are both responsible for the provider's suppliers.
  D. client organization has a clear understanding of the provider's suppliers.
  D. client organization has a clear understanding of the provider's suppliers.

• Question 165:

  Which of the following is the BEST recommendation to offer an organization's HR department planning to adopt a new public SaaS application to ease the recruiting process?

  A. Ensure HIPAA compliance.
  B. Implement a cloud access security broker.
  C. Consult the legal department.
  D. Do not allow data to be in clear text.
  B. Implement a cloud access security broker.

• Question 166:

  Which of the following is the MOST feasible way to validate the performance of CSPs for the delivery of technology resources?

  A. Cloud compliance program
  B. Legacy IT compliance program
  C. Internal audit program
  D. Service organization controls report
  D. Service organization controls report

• Question 167:

  Which of the following is a KEY benefit of using the Cloud Controls Matrix (CCM)?

  A. CCM uses a specific control for Infrastructure as a Service (IaaS).
  B. CCM maps to existing security standards, best practices, and regulations.
  C. CCM V4 is an improved version from CCM V3.0.1.
  D. CCM utilizes an ITIL framework to define the capabilities needed to manage the IT services and security services.
  B. CCM maps to existing security standards, best practices, and regulations.

• Question 168:

  Which of the following is a cloud-specific security standard?

  A. ISO27017
  B. ISO27701
  C. ISO22301
  D. ISO14001
  A. ISO27017

• Question 169:

  Which of the following is the GREATEST risk associated with hidden interdependencies between cloud services?

  A. The IT department does not clearly articulate the cloud to the organization.
  B. There is a lack of visibility over the cloud service providers' supply chain.
  C. Customers do not understand cloud technologies in enough detail.
  D. Cloud services are very complicated.
  B. There is a lack of visibility over the cloud service providers' supply chain.

• Question 170:

  Which of the following is the common cause of misconfiguration in a cloud environment?

  A. Absence of effective change control
  B. Using multiple cloud service providers
  C. New cloud computing techniques
  D. Traditional change process mechanisms
  A. Absence of effective change control