Certificate of Cloud Auditing Knowledge CCAK Exam Questions – Great CCAK Practice Exam [2022]

Certificate of Cloud Auditing Knowledge CCAK, as the first-ever, technical, vendor-neutral credential for cloud auditing, will fill a gap in the industry for competent technical professionals who can help organizations mitigate risks and optimize ROI in the cloud. Great CCAK practice exam witten by ITExamShop come with actual exam questions and verified answers, which will be your preparation materials for passing ISACA CCAK exam smoothly. ITExamShop assured your success in the CCAK Certificate of Cloud Auditing Knowledge real exam on your first attempt if you act upon the actual CCAK exam questions of ITExamShop, the professional guide, and study CCAK questions and answers with enough time.

Read CCAK Free Demo Questions Below To Find The Great CCAK Practice Exam Are Helpful

Page 1 of 2

 Loading...

1. A cloud customer configured and developed a solution on top of the certified cloud services. Building on top of a compliant CSP:

means that the cloud customer is also compliant.

means that the cloud customer and client are both compliant.

means that the cloud customer is compliant but their client is not compliant.

does not necessarily mean that the cloud customer is also compliant.

Launch demo modal

 Loading...

2. When a client’s business process ch be updated.

B. not be reviewed, but the cloud contract should be cancelled immediately.

C. not be reviewed as the SLA cannot be updated.

D. be reviewed and updated if required.

Launch demo modal

 Loading...

3. Which of the following quantitative measures is KEY for an auditor to review when assessing the implementation of continuous auditing of performance on a cloud system?

Service Level Objective (SLO)

Recovery Point Objectives (RPO)

Service Level Agreement (SLA)

Recovery Time Objectives (RTO)

Launch demo modal

 Loading...

4. How should controls be designed by an organization?

By the internal audit team

Using the ISO27001 framework

By the cloud provider

Using the organization’s risk management framework

Launch demo modal

 Loading...

5. Supply chain agreements between CSP and cloud customers should, at minimum, include:

Organization chart of the CSP

Policies and procedures of the cloud customer

Audits, assessments and independent verification of compliance certifications with agreement terms

Regulatory guidelines impacting the cloud customer

Launch demo modal

 Loading...

6. Your company is purchasing an application from a vendor. They do not allow you to perform an on-site audit on their information system. However, they say, they will provide the third-party audit attestation on the adequate control design within their environment.

Which report is the vendor providing you?

SOC 3

SOC 2, TYPE 2

SOC 1

SOC 2, TYPE 1

Launch demo modal

 Loading...

7. Which of the following would be considered as a factor to trust in a cloud service provider?

The level of exposure for public information

The level of proved technical skills

The level of willingness to cooperate

The level of open source evidence available

Launch demo modal

 Loading...

8. Cloud Control Matrix (CCM) controls can be used by cloud customers to:

develop new security baselines for the industry.

define different control frameworks for different cloud service providers.

facilitate communication with their legal department.

build an operational cloud risk management program.

Launch demo modal

 Loading...

9. Which of the following is an example of integrity technical impact?

The cloud provider reports a breach of customer personal data from an unsecured server.

A hacker using a stolen administrator identity alerts the discount percentage in the product database.

A DDoS attack renders the customer’s cloud inaccessible for 24 hours.

An administrator inadvertently click on Phish bait exposing his company to a ransomware attack.

Launch demo modal

 Loading...

10. Which of the following BEST ensures adequate restriction on the number of people who can access the pipeline production environment?

Ensuring segregation of duties in the production and development pipelines.

Role-based access controls in the production and development pipelines.

Separation of production and development pipelines.

Periodic review of the Cl/CD pipeline audit logs to identify any access violations.

Launch demo modal

Page 2 of 2

 Loading...

11. The Open Certification Framework is structured on three levels of trust. Those three levels of trust are:

CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Compliance

CSA STAR Audit, STAR Certification & Attestation (Third-party Assessment), STAR Continuous

CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Monitoring and Control

CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Continuous

Launch demo modal

 Loading...