Free CCAK Exam braindumps download (CCAK exam dumps Free)

Which statement about compliance responsibilities and ownership of accountability is correct?

Organizations may be able to transfer their accountability for compliance with various regulatory requirements to their CSPs, but they retain the ownership of responsibility.
Organizations may be able to transfer their responsibility for compliance with various regulatory requirements to their CSPs, but they retain the ownership of accountability.
Organizations may transfer their responsibility and accountability for compliance with various regulatory requirements to their CSPs.
Organizations are not able to transfer their responsibility nor accountability for compliance with various regulatory requirements to their CSPs.

Answer(s): D

https://searchcloudsecurity.techtarget.com/tip/Top-cloud-security-challenges-and-how-to-combatthem

Which objective is MOST appropriate to measure the effectiveness of password policy?

Answer(s): D

A Dot Release of Cloud Control Matrix (CCM) indicates what?

The introduction of new control frameworks mapped to previously-published CCM controls.
A revision of the CCM domain structure.
A technical change (revision or addition or deletion) of a number of controls is smaller than 10% compared to the previous ?Full? release.
A technical change (revision or addition or deletion) of a number of controls is greater than 10% compared to the previous ?Full? release.

Answer(s): A

What should be the auditor’s PRIMARY objective while examining a cloud service provider’s (CSP?s) SLA?

Verifying whether commensurate compensation in the form of service credits is factored in if the CSC is unable to match its SLA obligations
Verifying whether the SLA includes all the operational matters which are material to the operation of the service
Verifying whether the SLA caters to the availability requirements of the cloud service customer (CSC)
Verifying whether the SLAs are well-defined and measurable

Answer(s): C

Which of the following is an example of a corrective control?

A central anti-virus system installing the latest signature files before allowing a connection to the network
Unsuccessful access attempts being automatically logged for investigation
Privileged access to critical information systems requiring a second factor of authentication using soft token
All new employees having standard access rights until their manager approves privileged rights

Answer(s): C

Free CCAK Exam Braindumps Certificate of Cloud Auditing Knowledge Questions 116–120 (page: 25)