Which objective is MOST appropriate to measure the effectiveness of password policy?

Answer(s): D

A Dot Release of Cloud Control Matrix (CCM) indicates what?

The introduction of new control frameworks mapped to previously-published CCM controls.
A revision of the CCM domain structure.
A technical change (revision or addition or deletion) of a number of controls is smaller than 10% compared to the previous ?Full? release.
A technical change (revision or addition or deletion) of a number of controls is greater than 10% compared to the previous ?Full? release.

Answer(s): A

What should be the auditor’s PRIMARY objective while examining a cloud service provider’s (CSP?s) SLA?

Verifying whether commensurate compensation in the form of service credits is factored in if the CSC is unable to match its SLA obligations
Verifying whether the SLA includes all the operational matters which are material to the operation of the service
Verifying whether the SLA caters to the availability requirements of the cloud service customer (CSC)
Verifying whether the SLAs are well-defined and measurable

Answer(s): C

Which of the following is an example of a corrective control?

A central anti-virus system installing the latest signature files before allowing a connection to the network
Unsuccessful access attempts being automatically logged for investigation
Privileged access to critical information systems requiring a second factor of authentication using soft token
All new employees having standard access rights until their manager approves privileged rights

Answer(s): C

Free CCAK Exam Braindumps (page: 30)