Free CCAK Exam Braindumps
Certificate of Cloud Auditing Knowledge Questions 86–90 (page: 19)

Updated On: 10-Feb-2026

Which of the following are the three MAIN phases of the cloud controls matrix (CCM) mapping methodology?

  1. Plan --> Develop --> Release
  2. Deploy --> Monitor --> Audit
  3. Initiation --> Execution --> Monitoring and Controlling
  4. Preparation --> Execution --> Peer Review and Publication

Answer(s): D


Reference:

https://docplayer.net/153476370-Methodology-for-the-mapping-of-the-cloud-controls-matrixccm.html (page 5)



A large organization with subsidiaries in multiple locations has a business requirement to organize IT systems to have identified resources reside in particular locations with organizational personnel. Which access control method will allow IT personnel to be segregated across the various locations?

  1. Role Based Access Control
  2. Attribute Based Access Control
  3. Policy Based Access Control
  4. Rule Based Access Control

Answer(s): A



Which of the following is the MOST feasible way to validate the performance of CSPs for the delivery of technology resources?

  1. Cloud compliance program
  2. Legacy IT compliance program
  3. Internal audit program
  4. Service organization controls report

Answer(s): D



What data center and physical security measures should a cloud customer consider when assessing a cloud service provider?

  1. Assess use of monitoring systems to control ingress and egress points of entry to the data center.
  2. Implement physical security perimeters to safeguard personnel, data and information systems.
  3. Conduct a due diligence to verify the cloud provider applies adequate physical security measures.
  4. Review internal policies and procedures for relocation of hardware and software to an offsite location.

Answer(s): C


Reference:

https://www.omg.org/cloud/deliverables/CSCC-Security-for-Cloud-Computing-10-Steps-to-Ensure-Success.pdf



Which of the following is the MOST important audit scope document when conducting a review of a cloud service provider?

  1. Updated audit/work program
  2. Documentation criteria for the audit evidence
  3. Processes and systems to be audited
  4. Testing procedure to be performed

Answer(s): B



Viewing page 19 of 63
Viewing questions 91 - 95 out of 334 questions


Post your Comments and Discuss ISACA CCAK exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!