The BEST method to report continuous assessment of a cloud provider’s services to the CSA is through:
Answer(s): C
https://cloudsecurityalliance.org/press-releases/2019/03/04/csa-launches-star-continuouscompliance-assessment-program-for-cloud-service-providers/
With regard to the Cloud Control Matrix (CCM), the ?Architectural Relevance? is a feature that enables the filtering of security controls by:
Answer(s): D
https://downloads.cloudsecurityalliance.org/initiatives/ccm/CSA_CCM_v3.0.xlsx
To support customer’s verification of the CSP claims regarding their responsibilities according to the shared responsibility model, which of the following tools and techniques is appropriate?
Which of the following has the MOST substantial impact on how aggressive or conservative the cloud approach of an organization will be?
Which of the following would be a logical starting point for an auditor who has been engaged to assess the security of an organization’s DevOps pipeline?
https://cntemngwa.medium.com/how-to-assess-and-audit-devops-security-to-improve- businessvalue-10e81a2a6fd5
Post your Comments and Discuss ISACA CCAK exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CCAK content, but please register or login to continue.