CCAK practice questions 261–270

1. Question 261 · 271 in bank

   The MOST important goal of regression testing is to ensure:

   • Anew releases do not impact previous stable features.
   • Bthe system can handle a high number of users.
   • Cthe expected outputs are provided by the new features.
   • Dthe system can be restored after a technical issue.

   Show answer

   Answer: A

   Next question

2. Question 262 · 271 in bank

   A multinational organization that decided to move from a legacy on-premises system for processing payroll to a cloud-based solution is currently experiencing some regulatory issues due to inadequate protection of sensitive personal data. Who should be accountable for the impact in this scenario?

   • ABusiness process owner of the organization
   • BChief privacy officer (CPO) of the organization
   • CCompliance officer of the cloud service provider
   • DInformation security manager of the cloud service provider

   Show answer

   Answer: A

   Next question

3. Question 263 · 271 in bank

   When mapping controls to architectural implementations, requirements define:

   • Apolicies.
   • Bcontrol objectives.
   • Cguidelines.
   • Dcontrol activities.

   Show answer

   Answer: B

   Next question

4. Question 264 · 271 in bank

   An organization is using the Cloud Controls Matrix (CCM) to extend its IT governance in the cloud. Which of the following is the BEST way for the organization to take advantage of the supplier relationship feature?

   • ALeverage this feature to enable a smarter selection of the next cloud provider.
   • BFilter out only those controls directly influenced by contractual agreements.
   • CLeverage this feature to enable the adoption of the Shared Responsibility Model.
   • DFilter out only those controls having a direct impact on current terms of service (TOS) and service level agreement (SLA).

   Show answer

   Answer: A

   Next question

5. Question 265 · 271 in bank

   When an organization adopts a new cloud requirement, which of the following programs should perform testing to ensure the adopted requirements are effective?

   • ACompliance
   • BGovernance
   • CInternal auditors
   • DExternal auditors

   Show answer

   Answer: C

   Next question

6. Question 266 · 271 in bank

   Reviewing which of the following gives an auditor the BEST insight into how a client determines the continued suitability of a cloud vendor that has recently experienced multiple changes to its business model?

   • AOrganizational risk tolerance
   • BCompliance obligations register
   • CCloud service inventory
   • DCompetitor insight reports

   Show answer

   Answer: A

   Next question

7. Question 267 · 271 in bank

   A cloud customer has recently failed an audit certification. An auditor has reviewed the logging and monitoring policy defined by the cloud customer and identified that the policy is aligned to the compliance requirements. Which of the following could be the reason for the audit failure?

   • AThe policy is not accessible to all employees.
   • BThe policy does not mention that it is cloud-relevant.
   • CThe policy does not have the revision history.
   • DThe policy is available only in a Word document.

   Show answer

   Answer: C

   Next question

8. Question 268 · 271 in bank

   Larger financial commitments that an organization makes in cloud computing may have a drastic impact on the IT department but also have a direct effect on the:

   • Arisk management methodology.
   • BIT risk scoring criteria.
   • Crisk appetite and tolerance.
   • DIT risk profile.

   Show answer

   Answer: C

   Next question

9. Question 269 · 271 in bank

   When identifying the governance stakeholders in an organization, which of the following roles would MOST likely be responsible for setting the security requirements and frameworks for cloud migration?

   • AIT department
   • BGovernance, risk, and compliance (GRC)
   • CSecurity department
   • DSecurity consultants

   Show answer

   Answer: B

   Next question

10. Question 270 · 271 in bank

    Which of the following steps should be performed FIRST to ensure that privacy requirements of a client company are complied with by the cloud service provider?

    • AReview company policies and procedures
    • BReview cloud service agreements
    • CReview privacy guidance and best practices
    • DReview legal and regulatory standards

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCAK practice, question 261. 271 questions available.