CCAK Practice Online

Question 1

What data center and physical security measures should a cloud customer consider when assessing a cloud service provider?

A : Assess use of monitoring systems to control ingress and egress points of entry to the data center

B : Implement physical security perimeters to safeguard personnel, data and information systems.

C : Conduct a due diligence to verify the cloud provider applies adequate physical security measures.

D : Review internal policies and procedures for relocation of hardware and software to an offsite location

Answer: C

Question 2

You have been assigned the implementation of an ISMS, whose scope must cover both on premise and cloud infrastructure. Which of the following is your BEST option?

A : Implement ISO/IEC 27002 and complement it with additional controls from the CCM

B : Implement ISO/IEC 27001 and complement it with additional controls from ISO/IEC 27017.

C : Implement ISO/IEC 27001 and complement it with additional controls from ISO/IEC 27002.

D : Implement ISO/IEC 27001 and complement it with additional controls from the NIST SP 800-145

Answer: B

Question 3

During an audit it was identified that a critical application hosted in an off-premises cloud is not part of the organization’s DRP (Disaster Recovery Plan). Management stated that it is responsible for ensuring that the cloud service provider (CSP) has a plan that is tested annually. What should be the auditor’s NEXT course of action?

A : Review the CSP audit reports

B : Review the security white paper of the CSP.

C : Review the contract and DR capability.

D : Plan an audit of the CSP.

Answer: B

Question 4

Management planes deployed in cloud environments may pose a risk of potentially allowing access to the entire environment. Which of the following controls is MOST appropriate for mitigating this risk?

A : Regular audits

B : Increased monitoring

C : Change management

D : Access restriction

Answer: D

Question 5

Which of the following standards is MOST relevant for assurance over trust principles applicable to cloud security auditing?

A : ISO 27002

B : ISO 27001

C : SOC 2

D : SOC 1

Answer: C

Name:	Certificate of Cloud Auditing Knowledge
Exam Code:	CCAK
Certification:	CSA Cloud Security
Vendor:	Cloud Security Alliance
Total Questions:	231
Last Updated:	May 13, 2024

Download Demo CCAK Dumps

Create Account

Password Recovery

Download Demo CCAK Dumps

Member Login

Create Account

Password Recovery

CCAK Practice Online