CCAK

CCAK practice questions, page 13 of 13, with answer review and explanations.

Question 61

Which of the following would be considered as a factor to trust in a cloud service provider?

  1. The level of exposure for public information
  2. The level of proved technical skills
  3. The level of willingness to cooperate
  4. The level of open source evidence available

Question 62

When migrating to a cloud environment, which of the following should be the PRIMARY driver for the use of encryption?

  1. Cloud Service Provider encryption capabilities
  2. The presence of PII
  3. Organizational security policies
  4. Cost-benefit analysis

Question 63

A certification target helps in the formation of a continuous certification framework by incorporating:

  1. CSA STAR level 2 attestation.
  2. service level objective and service qualitative objective.
  3. frequency of evaluating security attributes.
  4. scope description and security attributes to be tested.

Question 64

In all three cloud deployment models, (IaaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?

  1. Cloud service customer
  2. Shared responsibility
  3. Cloud service provider
  4. Patching on hypervisor layer is not required

Question 65

Supply chain agreements between CSP and cloud customers should, at minimum, include:

  1. Organization chart of the CSP
  2. Policies and procedures of the cloud customer
  3. Audits, assessments and independent verification of compliance certifications with agreement terms
  4. Regulatory guidelines impacting the cloud customer