CCAK

CCAK practice questions, page 12 of 13, with answer review and explanations.

Question 56

To assist an organization with planning a cloud migration strategy to execution, an auditor should recommend the use of:

  1. object-oriented architecture.
  2. software architecture.
  3. service-oriented architecture.
  4. enterprise architecture.

Question 57

How should controls be designed by an organization?

  1. By the internal audit team
  2. Using the ISO27001 framework
  3. By the cloud provider
  4. Using the organization’s risk management framework

Question 58

Which of the following quantitative measures is KEY for an auditor to review when assessing the implementation of continuous auditing of performance on a cloud system?

  1. Service Level Objective (SLO)
  2. Recovery Point Objectives (RPO)
  3. Service Level Agreement (SLA)
  4. Recovery Time Objectives (RTO)

Question 59

Your company is purchasing an application from a vendor. They do not allow you to perform an on-site audit on their information system. However, they say, they will provide the third-party audit attestation on the adequate control design within their environment. Which report is the vendor providing you?

  1. SOC 3
  2. SOC 2, TYPE 2
  3. SOC 1
  4. SOC 2, TYPE 1

Question 60

Which of the following activities are part of the implementation phase of a cloud assurance program during a cloud migration?

  1. Development of the monitoring goals and requirements
  2. Identification of processes, functions, and systems
  3. Identification of the relevant laws, regulations, and standards
  4. Identification of roles and responsibilities