Free CCAK Exam Braindumps
Certificate of Cloud Auditing Knowledge Questions 96–100 (page: 21)

Updated On: 10-Feb-2026

Which of the following is the common cause of misconfiguration in a cloud environment?

  1. Absence of effective change control
  2. Using multiple cloud service providers
  3. New cloud computing techniques
  4. Traditional change process mechanisms

Answer(s): A

Explanation:


Reference:

https://businessinsights.bitdefender.com/the-top-5-cloud-threats-that-smbs-need-to-address



To ensure that integration of security testing is implemented on large code sets in environments where time to completion is critical, what form of validation should an auditor expect?

  1. Parallel testing
  2. Full application stack unit testing
  3. Regression testing
  4. Functional verification

Answer(s): B


Reference:

https://www.sciencedirect.com/topics/computer-science/black-box-testing



One of the Cloud Control Matrix’s (CCM?s) control specifications states that ?Independent reviews and assessments shall be performed at least annually to ensure that the organization addresses nonconformities of established policies, standards, procedures, and compliance obligations.? Which of the following controls under the Audit Assurance and Compliance domain does this match to?

  1. Audit planning
  2. Information system and regulatory mapping
  3. GDPR auditing
  4. Independent audits

Answer(s): B



In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:

  1. both operating system and application infrastructure contained within the CSP’s instances.
  2. both operating system and application infrastructure contained within the customer’s instances
  3. only application infrastructure contained within the CSP’s instances.
  4. only application infrastructure contained within the customer’s instances.

Answer(s): C



When building a cloud governance model, which of the following requirements will focus more on the cloud service provider’s evaluation and control checklist?

  1. Security requirements
  2. Legal requirements
  3. Compliance requirements
  4. Operational requirements

Answer(s): D



Viewing page 21 of 63
Viewing questions 101 - 105 out of 334 questions


Post your Comments and Discuss ISACA CCAK exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!