CCAK practice questions 161–170

1. Question 161 · 271 in bank

   The three layers of Open Certification Framework (OCF) PRIMARILY help cloud service providers and cloud clients improve the level of:

   • Atransparency and assurance.
   • Brisk and controls.
   • Clegal and regulatory compliance.
   • Daudit structure and formats.

   Show answer

   Answer: A

   Next question

2. Question 162 · 271 in bank

   What is the FIRST thing to define when an organization is moving to the cloud?

   • AInternal service level agreements (SLAs)
   • BGoals of the migration
   • CProvider evaluation criteria
   • DSpecific requirements

   Show answer

   Answer: B

   Next question

3. Question 163 · 271 in bank

   Which of the following cloud service models creates a cloud version of a contract template?

   • ASoftware as a Service (SaaS)
   • BSecurity as a Service (SecaaS)
   • CInfrastructure as a Service (IaaS)
   • DPlatform as a Service (PaaS)

   Show answer

   Answer: A

   Next question

4. Question 164 · 271 in bank

   Which of the following is the MOST likely reason for a deletion command not resulting in full destruction of data in the cloud?

   • AThe cloud service provider may have extra copies for availability purposes.
   • BThe cloud customer may not have the required rights to delete the data.
   • CCloud encryption may not allow the data to be deleted completely.
   • DThe cloud customer may not know the proper way to delete the data.

   Show answer

   Answer: A

   Next question

5. Question 165 · 271 in bank

   Which of the following cloud service provider activities MUST obtain a client’s approval?

   • ADeleting test accounts
   • BDeleting subscription owner accounts
   • CDeleting guest accounts
   • DDestroying test data

   Show answer

   Answer: B

   Next question

6. Question 166 · 271 in bank

   If a cloud agreement allows the cloud service provider to decommission any service within a set period, who is responsible for managing the risk introduced by this change?

   • ACloud service provider and risk manager
   • BRegulator
   • CCloud service provider
   • DCloud customer

   Show answer

   Answer: D

   Next question

7. Question 167 · 271 in bank

   When cloud customers are unable to satisfy their payment obligations, which type of termination is triggered by the cloud service provider?

   • ATermination for the missed payment
   • BTermination at the end of the term
   • CTermination for convenience
   • DTermination for cause

   Show answer

   Answer: D

   Next question

8. Question 168 · 271 in bank

   Which of the following capabilities is MOST important to ensure is in place for an organization adopting cloud technologies with a potential impact to business progress and competitiveness?

   • AClear definition of roles and responsibilities
   • BUnderstanding of the business objectives and strategy
   • CClear assignment of responsibility and accountability levels
   • DFull comprehension of applicable risk and outcomes for technology decisions

   Show answer

   Answer: B

   Next question

9. Question 169 · 271 in bank

   Which of the following is the MOST feasible way to validate the performance of cloud service providers for the delivery of technology resources?

   • ALegacy IT compliance program
   • BInternal audit program
   • CCloud compliance program
   • DService organization controls report

   Show answer

   Answer: D

   Next question

10. Question 170 · 271 in bank

    Why is it important for the individuals in charge of cloud compliance to understand the organization’s past?

    • ATo determine the risk profile of the organization
    • BTo determine the current state of the organization’s compliance
    • CTo verify whether the measures implemented from the lessons learned are effective
    • DTo address any open findings from previous external audits

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCAK practice, question 161. 271 questions available.