Which of the following is the BEST way for a client to enforce a policy violation committed by a cloud service provider (CSP)?

Answer(s): A

https://www.omg.org/cloud/deliverables/CSCC-Security-for-Cloud-Computing-10-Steps-to-Ensure-Success.pdf

Which of the following is a corrective control that may be identified in a SaaS service provider?

Answer(s): D

Which of the following configuration change controls is acceptable to a cloud auditor?

Development, test and production are hosted in the same network environment.
Programmers have permanent access to production software.
The Head of Development approves changes requested to production.
Programmers cannot make uncontrolled changes to the source code production version.

Answer(s): D

In cloud computing, with whom does the responsibility and accountability for compliance lie?

The cloud service provider is responsible and accountable for compliance.
The cloud service provider is responsible for compliance, and the cloud service customer is accountable.
The cloud service customer is responsible and accountable for compliance.
The cloud service customer is responsible for compliance, and the cloud service provider is accountable.

Answer(s): D

Free CCAK Exam Braindumps (page: 20)