CCAK practice questions 121–130

1. Question 121 · 271 in bank

   The PRIMARY objective for an auditor to understand the organization’s context for a cloud audit is to:

   • Adetermine whether the organization has carried out control self-assessment and validated audit reports of the cloud service providers (CSP).
   • Bvalidate an understanding of the organization’s current state and how the cloud audit plan fits into the existing audit approach.
   • Cvalidate whether an organization has a cloud audit plan in place.
   • Dvalidate the organization’s performance effectiveness utilizing cloud service providers (CSP) solutions.

   Show answer

   Answer: B

   Next question

2. Question 122 · 271 in bank

   Which of the following defines the criteria designed by the American Institute of Certified Public Accountants (AICPA) to specify trusted services?

   • ASecurity, confidentiality, availability, privacy and processing integrity
   • BSecurity, applicability, availability, privacy and processing integrity
   • CSecurity, confidentiality, availability, privacy and trustworthiness
   • DSecurity, data integrity, availability, privacy and processing integrity

   Show answer

   Answer: A

   Next question

3. Question 123 · 271 in bank

   Which of the following is the BEST control framework for a European manufacturing corporation that is migrating to the cloud?

   • ANIST SP 800-53
   • BCSA’s GDPR CoC
   • CPCI-DSS
   • DEU GDPR

   Show answer

   Answer: D

   Next question

4. Question 124 · 271 in bank

   Account design in the cloud should be driven by:

   • Asecurity requirements.
   • Borganizational structure.
   • Cbusiness continuity policies.
   • Dmanagement structure.

   Show answer

   Answer: A

   Next question

5. Question 125 · 271 in bank

   What should be the control audit frequency for Business Continuity Management?

   • AQuarterly
   • BAnnually
   • CMonthly
   • DSemi-annually

   Show answer

   Answer: B

   Next question

6. Question 126 · 271 in bank

   When identifying the governance stakeholders in an organization, which of the following roles would MOST likely be responsible for cloud migration and ongoing maintenance?

   • AEnterprise architects
   • BIT
   • CGovernance risk, and compliance (GRC)
   • DCloud providers

   Show answer

   Answer: B

   Next question

7. Question 127 · 271 in bank

   The cloud risk management process should:

   • Aevaluate only the cloud providers’ general maturity.
   • Bverify the provider’s policy aligns with the customer’s policy.
   • Cevaluate the specific cloud service features.
   • Devaluate the services of the same security features.

   Show answer

   Answer: C

   Next question

8. Question 128 · 271 in bank

   Which of the following is a category of trust in cloud computing?

   • AReputation-based trust
   • BBackground-based trust
   • CLoyalty-based trust
   • DTransparency-based trust

   Show answer

   Answer: A

   Next question

9. Question 129 · 271 in bank

   While using public cloud services, cloud users may cede direct control over:

   • Aanti-malware solutions.
   • Bencryption keys.
   • Csecurity patching.
   • Dpenetration testing.

   Show answer

   Answer: C

   Next question

10. Question 130 · 271 in bank

    In which of the following risk scenarios should a cloud customer have the full responsibility in all cloud service models?

    • AInfrastructure risk
    • BIdentity and access risk
    • CEndpoint risk
    • DData classification risk

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCAK practice, question 121. 271 questions available.