[Oct-2021] Valid Way To Pass ISACA Exam Dumps with CCAK Exam Study Guide
All CCAK Dumps and Certificate of Cloud Auditing Knowledge Training Courses Help candidates to study and pass the Exams hassle-free!
NEW QUESTION 14
Dynamic Application Security Testing (DAST) might be limited or require pre-testing permission from the provider.
- A. True
- B. False
Answer: A
NEW QUESTION 15
What is true of security as it relates to cloud network infrastructure?
- A. You should implement a default allow with cloud firewalls and then restrict as necessary.
- B. You should applycloud firewalls on a per-network basis.
- C. You should deploy your cloud firewalls identical to the existing firewalls.
- D. You should always open traffic between workloads in the same virtual subnet for better visibility.
- E. You should implement a default deny with cloud firewalls.
Answer: E
NEW QUESTION 16
ENISA: Lock-in is ranked as a high risk in ENISA research, a key underlying vulnerability causing lock in is:
- A. Unclear asset ownership
- B. Audit or certification not available to customers
- C. No source escrow agreement
- D. Lack of completeness and transparency in terms of use
- E. Lack of information onjurisdictions
Answer: D
NEW QUESTION 17
Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?
- A. More physical control over assets and processes.
- B. None of the above.
- C. Decreased requirement for proactive management of relationship and adherence to contracts.
- D. Increased need, but reduction in costs, for managing risks accepted by the cloud provider.
- E. Greater reliance on contracts, audits, and assessments due to lack of visibility or management.
Answer: E
NEW QUESTION 18
What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?
- A. The fragmentation and encryption algorithms employed
- B. Thephysical location of the data and how it is accessed
- C. The actualsize of the data and the storage format
- D. The language of the data and how it affects the user
- E. The implications of storing complex information on simple storage systems
Answer: E
NEW QUESTION 19
How can virtual machine communications bypass network security controls?
- A. VM images can contain rootkits programmed to bypass firewalls
- B. Hypervisors depend upon multiple network interfaces
- C. VM communications may use a virtual network on the same hardware host
- D. Most network security systems do not recognize encrypted VM traffic
- E. The guest OS can invoke stealth mode
Answer: C
NEW QUESTION 20
Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?
- A. Organized Downtime
- B. PlannedOutages
- C. Resiliency Planning
- D. Chaos Engineering
- E. Expected Engineering
Answer: D
NEW QUESTION 21
To understand their compliance alignments and gaps with a cloud provider, what must cloud customers rely on?
- A. Provider and consumer contracts
- B. EDiscovery tools
- C. Third-party attestations
- D. Provider run audits and reports
- E. Provider documentation
Answer: C
NEW QUESTION 22
An audit has identified that business units have purchased cloud-based applications without ITs support. What is the GREATEST risk associated with this situation?
- A. The application purchases did not follow procurement policy.
- B. The applications could be modified without advanced notice.
- C. The applications may not reasonably protect data.
- D. The applications are not included in business continuity plans (BCPs).
Answer: D
NEW QUESTION 23
In which type of environment is it impractical to allow the customer to conduct their own audit, making it important that the data center operators are required to provide auditing for the customers?
- A. Long distance relationships
- B. Single tenantenvironments
- C. Multi-tenant environments
- D. Distributed computing arrangements
- E. Multi-application, single tenant environments
Answer: C
NEW QUESTION 24
Which data security control is the LEAST likely to be assigned to an IaaSprovider?
- A. Application logic
- B. Encryption solutions
- C. Physical destruction
- D. Asset management and tracking
- E. Access controls
Answer: A
NEW QUESTION 25
Which attack surfaces, if any, does virtualization technology introduce?
- A. All of the above
- B. The hypervisor
- C. Configuration and VM sprawl issues
- D. Virtualization management components apart from the hypervisor
Answer: A
NEW QUESTION 26
What is true of companies considering a cloud computing business relationship?
- A. The confidentiality agreements between companies using cloud computing services is limited legally to the company, not the provider.
- B. The cloud computing companies are absolved of all data security and associated risks through contracts and data laws.
- C. The cloud computing companies own all customer data.
- D. The laws protecting customer data arebased on the cloud provider and customer location only.
- E. The companies using the cloud providers are the custodians ofthe data entrusted to them.
Answer: E
NEW QUESTION 27
CCM: In the CCM tool, ais a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.
- A. Control Specification
- B. Domain
- C. Risk Impact
Answer: A
NEW QUESTION 28
Network logs from cloud providers are typically flow records, not full packet captures.
- A. True
- B. False
Answer: A
NEW QUESTION 29
Which of the following cloud deployment models would BEST meet the needs of a startup software development organization with limited initial capital?
- A. Community
- B. Private
- C. Public
- D. Hybrid
Answer: C
NEW QUESTION 30
Segregation of duties would be compromised if:
- A. operations staff modified batch schedules.
- B. database administrators (DBAs) modified the structure of user tables.
- C. application programmers accessed test data.
- D. application programmers moved programs into production.
Answer: C
NEW QUESTION 31
Which of the following would be MOST important to update once a decision has been made to outsource a critical application to a cloud service provider?
- A. IT budget
- B. Business impact analysis (BIA)
- C. Project portfolio
- D. IT resource plan
Answer: B
NEW QUESTION 32
Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?
- A. Software Development Kits (SDKs)
- B. Application Programming Interface (API)
- C. Resource Description Framework (RDF)
- D. Application Binary Interface (ABI)
- E. Extensible Markup Language (XML)
Answer: B
NEW QUESTION 33
When deploying Security as a Service in a highly regulated industry or environment, what should bothparties agree on in advance and include in the SLA?
- A. The metrics defining the service level required to achieve regulatory objectives.
- B. The duration of time that a security violation can occur before the client begins assessing regulatory fines.
- C. The cost per incident for security breaches of regulated information.
- D. The type of security software which meets regulations and the number of licenses that will be needed.
- E. The regulations that are pertinent to the contract and how to circumvent them.
Answer: A
NEW QUESTION 34
......
Real Exam Questions & Answers - ISACA CCAK Dump is Ready: https://drive.google.com/open?id=1Fw380kdJrPxq2BmO-ekHLYeH2TqWHYVJ
Get Latest [Oct-2021] Conduct effective penetration tests using BraindumpsVCE CCAK