Cloud Security Alliance CCAK Dumps | Updated Sep 14, 2021 - ActualTorrent
Master 2021 Latest The Questions Cloud Security Alliance and Pass CCAK Real Exam!
NEW QUESTION 40
Which of the following is the GREATEST concern associated with migrating computing resources to a cloud virtualized environment?
- A. An increase in inherent vulnerability
- B. An increase in residual risk
- C. An increase in the potential for data leakage
- D. An increase in the number of e-discovery requests
Answer: C
NEW QUESTION 41
What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?
- A. Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.
- B. Maintaining customer managed key management and revoking ordeleting keys from the key management system to prevent the data from being accessed again.
- C. Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.
- D. Both B and D.
- E. Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.
Answer: B
NEW QUESTION 42
Which of the following should be an IS auditor's GREATEST concern when reviewing an outsourcing arrangement with a third-party cloud service provider to host personally identifiable data?
- A. The organization's servers are not compatible with the third party's infrastructure
- B. The data is not adequately segregated on the host platform.
- C. Fees are charged based on the volume of data stored by the host.
- D. The outsourcing contract does not contain a right-to-audit clause.
Answer: B
NEW QUESTION 43
Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?
- A. Infrastructure-as-a-service (IaaS)
- B. Software-as-a-service (SaaS)
- C. Desktop-as-a-service (DaaS)
- D. Identity-as-a-service (IDaaS)
- E. Platform-as-a-service (PaaS)
Answer: E
NEW QUESTION 44
Which statement best describes the impact of Cloud Computing on business continuity management?
- A. Geographic redundancyensures that Cloud Providers provide highly available services.
- B. Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.
- C. The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomesnecessary.
- D. A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.
- E. Customers of SaaS providers in particular need to mitigate the risks of application lock-in.
Answer: A
NEW QUESTION 45
Why is a service type of network typically isolated on different hardware?
- A. It manages resource pools for cloud consumers
- B. It manages the traffic between other networks
- C. It requires distinct access controls
- D. It has distinct functions from other networks
- E. It requires unique security
Answer: B
NEW QUESTION 46
An audit has identified that business units have purchased cloud-based applications without ITs support. What is the GREATEST risk associated with this situation?
- A. The application purchases did not follow procurement policy.
- B. The applications could be modified without advanced notice.
- C. The applications may not reasonably protect data.
- D. The applications are not included in business continuity plans (BCPs).
Answer: D
NEW QUESTION 47
Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?
- A. Software Development Kits (SDKs)
- B. Application Programming Interface (API)
- C. Resource Description Framework (RDF)
- D. Application Binary Interface (ABI)
- E. Extensible Markup Language (XML)
Answer: B
NEW QUESTION 48
Which of the following should be the PRIMARY concern of an IS auditor during a review of an external IT service level agreement (SLA) for computer operations?
- A. Lack of software escrow provisions
- B. Vendor has exclusive control of IT resources
- C. No employee succession plan
- D. Changes in services are not tracked
Answer: D
NEW QUESTION 49
Which of the following would be MOST important to update once a decision has been made to outsource a critical application to a cloud service provider?
- A. IT budget
- B. Business impact analysis (BIA)
- C. Project portfolio
- D. IT resource plan
Answer: B
NEW QUESTION 50
Which of thefollowing items is NOT an example of Security as a Service (SecaaS)?
- A. Authentication
- B. Provisioning
- C. Intrusion detection
- D. Spam filtering
- E. Web filtering
Answer: B
NEW QUESTION 51
What is defined as the process by which an opposing party may obtain private documents for use in litigation?
- A. Custody
- B. Subpoena
- C. Scope
- D. Discovery
- E. Risk Assessment
Answer: D
NEW QUESTION 52
Dynamic Application Security Testing (DAST) might be limited or require pre-testing permission from the provider.
- A. True
- B. False
Answer: A
NEW QUESTION 53
Which of the following is NOT a cloud computing characteristic that impacts incidence response?
- A. The possibility of data crossing geographic or jurisdictional boundaries.
- B. Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.
- C. Object-based storage in a private cloud.
- D. The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.
- E. The on demand self-service nature of cloud computing environments.
Answer: B
NEW QUESTION 54
An internal audit department recently established a quality assurance (QA) program as part of its overall audit program. Which of the following activities is MOST important to include as part of the QA program requirements?
- A. Reporting OA program results to the audit committee
- B. Benchmarking the QA framework to international standards
- C. Conducting long-term planning for internal audit staffing
- D. Analyzing user satisfaction reports from business lines
Answer: D
NEW QUESTION 55
Your SLA with your cloudprovider ensures continuity for all services.
- A. False
- B. True
Answer: A
NEW QUESTION 56
......
A fully updated 2021 CCAK Exam Dumps exam guide from training expert ActualTorrent: https://www.actualtorrent.com/CCAK-questions-answers.html
Practice To CCAK - ActualTorrent Remarkable Practice On your Certificate of Cloud Auditing Knowledge Exam: https://drive.google.com/open?id=1_5m6ej-6FICc3sMtoGZb6_KtcRpkTfRY