Free CCAK Exam Braindumps

What areas should be reviewed when auditing a public cloud?

  1. Patching, source code reviews, hypervisor, access controls
  2. Identity and access management, data protection
  3. Patching, configuration, hypervisor, backups
  4. Vulnerability management, cyber security reviews, patching

Answer(s): B



Which of the following key stakeholders should be identified the earliest when an organization is designing a cloud compliance program?

  1. Cloud process owners
  2. Internal control function
  3. Legal functions
  4. Cloud strategy owners

Answer(s): A



Which of the following CSP activities requires a client’s approval?

  1. Delete the guest account or test accounts
  2. Delete the master account or subscription owner accounts
  3. Delete the guest account or destroy test data
  4. Delete the test accounts or destroy test data

Answer(s): D



A cloud service provider does not allow audits using automated tools as these tools could be considered destructive techniques for the cloud environment. Which of the following aspects of the audit will be constrained?

  1. Purpose
  2. Objectives
  3. Nature of relationship
  4. Scope

Answer(s): B


Reference:

https://www.isaca.org/-/media/files/isacadp/project/isaca/articles/journal/2018/volume- 5/journalvolume-5-2018






Post your Comments and Discuss ISACA CCAK exam with other Community members:

ccak commented on June 08, 2023
ccak is hard
Anonymous
upvote