Isaca CCAK Quiz 1 Topic 1 Questions 1-5

Question: 1

Supply chain agreements between CSP and cloud customers should, at minimum, include:

AOrganization chart of the CSP

BPolicies and procedures of the cloud customer

CAudits, assessments and independent verification of compliance certifications with agreement terms

DRegulatory guidelines impacting the cloud customer

Show Answer

Question: 2

Prioritizing assurance activities for an organization's cloud services portfolio depends PRIMARILY on an organization's ability to:

Aschedule frequent reviews with high-risk cloud service providers.

Bdevelop plans using a standardized risk-based approach.

Cmaintain a comprehensive cloud service inventory.

Dcollate views from various business functions using cloud services.

Show Answer

Question: 3

An organization is in the initial phases of cloud adoption. It is not very knowledgeable about cloud security and cloud shared responsibility models. Which of the following approaches is BEST suited for such an organization to evaluate its cloud security?

AUse of an established standard/regulation to map controls and use as the audit criteria

BFor efficiency reasons, use of its on-premises systems' audit criteria to audit the cloud environment

CAs this is the initial stage, the ISO/IEC 27001 certificate shared by the cloud service provider is sufficient for audit and compliance purposes.

DDevelopment of the cloud security audit criteria based on its own internal audit test plans to ensure appropriate coverage

Show Answer

Question: 4

Which of the following cloud models prohibits penetration testing?

AHybrid Cloud

BPrivate Cloud

CPublic Cloud

DCommunity Cloud

Show Answer

Question: 5

A large organization with subsidiaries in multiple locations has a business requirement to organize IT systems to have identified resources reside in particular locations with organizational personnel. Which access control method will allow IT personnel to be segregated across the various locations?

ARole Based Access Control

BAttribute Based Access Control

CPolicy Based Access Control

DRule Based Access Control

Show Answer

Isaca CCAK Quiz:1 Topic:1 Questions:1-5