support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. ISACA
  4. CCAK

Free CCAK Exam Braindumps
Certificate of Cloud Auditing Knowledge Questions 76–80 (page: 17)

Updated On: 10-Feb-2026
Page 17 of 63
PDF with 334 Questions

An organization deploying the Cloud Control Matrix (CCM) to perform a compliance assessment will encompass the use of the ‘Corporate Governance Relevance’ feature to filter out those controls:

  1. relating to policies, processes, laws, regulations, and institutions conditioning the way an organization is managed, directed, or controlled.
  2. that can be either of a management or of a legal nature, therefore requiring an approval from the Change Advisory Board.
  3. that require the prior approval from the Board of Directors to be funded (for either make or buy), implemented, and reported on.
  4. that can be either of an administrative or of a technical nature, therefore requiring an approval from the Change Advisory Board.

Answer(s): A



Which of the following is the BEST way for a client to enforce a policy violation committed by a cloud service provider (CSP)?

  1. The violation is agreed upon and documented.
  2. Nothing can be done to enforce violations as this is a cloud service.
  3. The violation is agreed to verbally by the CSP.
  4. Violations will be automatically enforced so no action is needed.

Answer(s): A


Reference:

https://www.omg.org/cloud/deliverables/CSCC-Security-for-Cloud-Computing-10-Steps-to-Ensure-Success.pdf



Which of the following is a corrective control that may be identified in a SaaS service provider?

  1. Log monitoring
  2. Penetration testing
  3. Incident response plans
  4. Vulnerability scan

Answer(s): D



Which of the following configuration change controls is acceptable to a cloud auditor?

  1. Development, test and production are hosted in the same network environment.
  2. Programmers have permanent access to production software.
  3. The Head of Development approves changes requested to production.
  4. Programmers cannot make uncontrolled changes to the source code production version.

Answer(s): D



In cloud computing, with whom does the responsibility and accountability for compliance lie?

  1. The cloud service provider is responsible and accountable for compliance.
  2. The cloud service provider is responsible for compliance, and the cloud service customer is accountable.
  3. The cloud service customer is responsible and accountable for compliance.
  4. The cloud service customer is responsible for compliance, and the cloud service provider is accountable.

Answer(s): D



  PDF
Viewing page 17 of 63
Viewing questions 81 - 85 out of 334 questions


Post your Comments and Discuss ISACA CCAK exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!