Free Cloud Security Alliance CCAK Exam Questions

Become Cloud Security Alliance Certified with updated CCAK exam questions and correct answers

Page: 1 / 58

Total 287 Questions | Updated On: Nov 18, 2024

Add To Cart

Question 1

An auditor is assessing a European organization's compliance. Which regulation is suitable if health information needs to be protected?

A : GDPR

B : DPIA

C : DPA

D : HIPAA

Answer: A

Question 2

An auditor is reviewing an organization’s virtual machines (VMs) hosted in the cloud. The organization utilizes a configuration management (CM) tool to enforce password policies on its VMs. Which of the following is the BEST approach for the auditor to use to review the operating effectiveness of the password requirement?

A : The auditor should not rely on the CM tool and its settings, and for thoroughness should review the password configuration on the set of sample VMs.

B : Review the relevant configuration settings on the CM tool and check whether the CM tool agents are operating effectively on the sample VMs.

C : As it is an automated environment, reviewing the relevant configuration settings on the CM tool would be sufficient.

D : Review the incident records for any incidents relating to brute force attacks or password compromise in the last 12 months and investigate whether the root cause of the incidents was due to in appropriate password policy configured on the VMs.

Answer: B

Question 3

When an organization is moving to the cloud, responsibilities are shared based upon the cloud service provider's model and accountability is:

A : shared

B : avoided.

C : transferred.

D : maintained.

Answer: D

Question 4

What legal documents should be provided to the auditors in relation to risk management?

A : Enterprise cloud strategy and policy

B : Contracts and service level agreements (SLAs) of cloud service providers

C : Policies and procedures established around third-party risk assessments

D : Inventory of third-party attestation reports

Answer: B

Question 5

In audit parlance, what is meant by "management representation"?

A : A person or group of persons representing executive management during audits

B : A mechanism to represent organizational structure

C : A project management technique to demonstrate management's involvement in key project stages

D : Statements made by management in response to specific inquiries

Answer: D

Page: 1 / 58

Total 287 Questions | Updated On: Nov 18, 2024

Add To Cart