CCAK

CCAK practice questions, page 7 of 13, with answer review and explanations.

Question 31

Within an organization, which of the following functions should be responsible for defining the cloud adoption approach?

  1. Audit committee
  2. Compliance manager
  3. IT manager
  4. Senior management

Question 32

An independent contractor is assessing security maturity of a SaaS company against industry standards. The SaaS company has developed and hosted all their products using the cloud services provided by a third-party cloud service provider (CSP). What is the optimal and most efficient mechanism to assess the controls CSP is responsible for?

  1. Review third-party audit reports.
  2. Review CSP’s published questionnaires.
  3. Directly audit the CSP.
  4. Send supplier questionnaire to the CSP.

Question 33

What areas should be reviewed when auditing a public cloud?

  1. Patching, source code reviews, hypervisor, access controls
  2. Identity and access management, data protection
  3. Patching, configuration, hypervisor, backups
  4. Vulnerability management, cyber security reviews, patching

Question 34

Which of the following key stakeholders should be identified the earliest when an organization is designing a cloud compliance program?

  1. Cloud process owners
  2. Internal control function
  3. Legal functions
  4. Cloud strategy owners

Question 35

Which of the following CSP activities requires a client’s approval?

  1. Delete the guest account or test accounts
  2. Delete the master account or subscription owner accounts
  3. Delete the guest account or destroy test data
  4. Delete the test accounts or destroy test data