Isaca CCAK Online Practice Questions and Exam Preparation

Isaca CCAK Online Questions & Answers

• Question 211:

  Customer management interface, if compromised over public internet, can lead to:

  A. customer's computing and data compromise.
  B. access to the RAM of neighboring cloud computer.
  C. ease of acquisition of cloud services.
  D. incomplete wiping of the data.
  A. customer's computing and data compromise.

• Question 212:

  When reviewing a third-party agreement with a cloud service provider, which of the following should be the GREATEST concern regarding customer data privacy?

  A. Data retention, backup, and recovery
  B. Patch management process
  C. Return or destruction of information
  D. Network intrusion detection
  A. Data retention, backup, and recovery

• Question 213:

  Which of the following is the BEST tool to perform cloud security control audits?

  A. General Data Protection Regulation (GDPR)
  B. ISO 27001
  C. Federal Information Processing Standard (FIPS) 140-2
  D. CSA Cloud Control Matrix (CCM)
  D. CSA Cloud Control Matrix (CCM)

• Question 214:

  In which control should a cloud service provider, upon request, inform customers of compliance impact and risk, especially if customer data is used as part of the services?

  A. Service Provider control
  B. Impact and Risk control
  C. Data Inventory control
  D. Compliance control
  A. Service Provider control

• Question 215:

  Which of the following should be an assurance requirement when an organization is migrating to a Software as a Service (SaaS) provider?

  A. Location of data
  B. Amount of server storage
  C. Access controls
  D. Type of network technology
  C. Access controls

• Question 216:

  Which of the following principles, when combined with a structured development methodology, would BEST contribute to the consistent introduction of secure and compliant Software as a Service (SaaS) solutions in an organization?

  A. Least common mechanism
  B. Security by design
  C. Least privilege
  D. Fail safe defaults
  B. Security by design

• Question 217:

  The MOST important goal of regression testing is to ensure:

  A. the expected outputs are provided by the new features.
  B. the system can handle a high number of users.
  C. the system can be restored after a technical issue.
  D. new releases do not impact previous stable features.
  D. new releases do not impact previous stable features.

• Question 218:

  While using Software as a Service (SaaS) to store secret customer information, an organization identifies a risk of disclosure to unauthorized parties. Although the SaaS service continues to be used, secret customer data is not processed. Which of the following risk treatment methods is being practiced?

  A. Risk acceptance
  B. Risk transfer
  C. Risk mitigation
  D. Risk reduction
  C. Risk mitigation

• Question 219:

  Which of the following parties should have accountability for cloud compliance requirements?

  A. Customer
  B. Equally shared between customer and provider
  C. Provider
  D. Either customer or provider, depending on requirements
  B. Equally shared between customer and provider

• Question 220:

  A cloud auditor should use statistical sampling rather than judgment (nonstatistical) sampling when:

  A. generalized audit software is unavailable.
  B. the auditor wants to avoid sampling risk.
  C. the probability of error must be objectively quantified.
  D. the tolerable error rate cannot be determined.
  C. the probability of error must be objectively quantified.