CCAK practice questions 61–70

1. Question 61 · 271 in bank

   When migrating to a cloud environment, which of the following should be the PRIMARY driver for the use of encryption?

   • ACloud Service Provider encryption capabilities
   • BThe presence of PII
   • COrganizational security policies
   • DCost-benefit analysis

   Show answer

   Answer: C

   Next question

2. Question 62 · 271 in bank

   A certification target helps in the formation of a continuous certification framework by incorporating:

   • ACSA STAR level 2 attestation.
   • Bservice level objective and service qualitative objective.
   • Cfrequency of evaluating security attributes.
   • Dscope description and security attributes to be tested.

   Show answer

   Answer: D

   Next question

3. Question 63 · 271 in bank

   Supply chain agreements between CSP and cloud customers should, at minimum, include:

   • AOrganization chart of the CSP
   • BPolicies and procedures of the cloud customer
   • CAudits, assessments and independent verification of compliance certifications with agreement terms
   • DRegulatory guidelines impacting the cloud customer

   Show answer

   Answer: C

   Next question

4. Question 64 · 271 in bank

   In all three cloud deployment models, (IaaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?

   • ACloud service customer
   • BShared responsibility
   • CCloud service provider
   • DPatching on hypervisor layer is not required

   Show answer

   Answer: C

   Next question

5. Question 65 · 271 in bank

   Which of the following contract terms is necessary to meet a company’s requirement that needs to move data from one CSP to another?

   • ADrag and Drop
   • BLift and shift
   • CFlexibility to move
   • DTransition and data portability

   Show answer

   Answer: D

   Next question

6. Question 66 · 271 in bank

   The Cloud Octagon Model was developed to support organizations:

   • Arisk assessment methodology.
   • Brisk treatment methodology.
   • Cincident response methodology.
   • Dincident detection methodology.

   Show answer

   Answer: A

   Next question

7. Question 67 · 271 in bank

   Which of the following BEST ensures adequate restriction on the number of people who can access the pipeline production environment?

   • AEnsuring segregation of duties in the production and development pipelines.
   • BRole-based access controls in the production and development pipelines.
   • CSeparation of production and development pipelines.
   • DPeriodic review of the Cl/CD pipeline audit logs to identify any access violations.

   Show answer

   Answer: C

   Next question

8. Question 68 · 271 in bank

   Which of the following is a cloud-native solution designed to counter threats that do not exist within the enterprise?

   • APolicy based access control
   • BAttribute based access control
   • CRule based access control
   • DRole based access control

   Show answer

   Answer: B

   Next question

9. Question 69 · 271 in bank

   A cloud customer configured and developed a solution on top of the certified cloud services. Building on top of a compliant CSP:

   • Ameans that the cloud customer is also compliant.
   • Bmeans that the cloud customer and client are both compliant.
   • Cmeans that the cloud customer is compliant but their client is not compliant.
   • Ddoes not necessarily mean that the cloud customer is also compliant.

   Show answer

   Answer: D

   Next question

10. Question 70 · 271 in bank

    A CSP providing cloud services currently being used by the United States federal government should obtain which of the following to assure compliance to stringent government standards?

    • AMulti-Tier Cloud Security (MTCS) Attestation
    • BFedRAMP Authorization
    • CISO/IEC 27001:2013 Certification
    • DCSA STAR Level Certificate

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCAK practice, question 61. 271 questions available.