An auditor is performing an audit on behalf of a cloud customer. For assessing security awareness, the auditor should:

assess the existence and adequacy of a security awareness training program at the cloud service provider’s organization as the cloud customer hired the auditor to review and cloud service.
assess the existence and adequacy of a security awareness training program at both the cloud customer’s organization and the cloud service provider’s organization.
assess the existence and adequacy of a security awareness training program at the cloud customer’s organization as they hired the auditor.
not assess the security awareness training program as it is each organization’s responsibility

Answer(s): D

The MOST critical concept of managing the build and test of code in DevOps is:

Answer(s): B

https://smartbear.com/blog/devops-testing-strategy-best-practices-tools/

The Cloud Computing Compliance Controls Catalogue (C5) framework is maintained by which of the following agencies?

Answer(s): D

https://docs.microsoft.com/en-us/compliance/regulatory/offering-c5-germany

Which statement about compliance responsibilities and ownership of accountability is correct?

Organizations may be able to transfer their accountability for compliance with various regulatory requirements to their CSPs, but they retain the ownership of responsibility.
Organizations may be able to transfer their responsibility for compliance with various regulatory requirements to their CSPs, but they retain the ownership of accountability.
Organizations may transfer their responsibility and accountability for compliance with various regulatory requirements to their CSPs.
Organizations are not able to transfer their responsibility nor accountability for compliance with various regulatory requirements to their CSPs.

Answer(s): D

https://searchcloudsecurity.techtarget.com/tip/Top-cloud-security-challenges-and-how-to-combatthem

Free CCAK Exam Braindumps (page: 29)