[Nov 23, 2021] Pass Your CCAK Dumps Free Latest ISACA Practice Tests
Get Top-Rated ISACA CCAK Exam Dumps Now
NEW QUESTION 15
Your SLA with your cloudprovider ensures continuity for all services.
- A. False
- B. True
Answer: A
NEW QUESTION 16
How can virtual machine communications bypass network security controls?
- A. VM images can contain rootkits programmed to bypass firewalls
- B. Most network security systems do not recognize encrypted VM traffic
- C. The guest OS can invoke stealth mode
- D. Hypervisors depend upon multiple network interfaces
- E. VM communications may use a virtual network on the same hardware host
Answer: E
NEW QUESTION 17
Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?
- A. Increased need, but reduction in costs, for managing risks accepted by the cloud provider.
- B. Greater reliance on contracts, audits, and assessments due to lack of visibility or management.
- C. None of the above.
- D. Decreased requirement for proactive management of relationship and adherence to contracts.
- E. More physical control over assets and processes.
Answer: B
NEW QUESTION 18
What is true of searching data across cloud environments?
- A. You can easily search across your environment using any E-Discovery tool.
- B. All cloud-hosted email accounts are easily searchable.
- C. You might not have the ability oradministrative rights to search or access all hosted data.
- D. The cloud provider must conduct the search with the full administrative controls.
- E. Search and discovery time is alwaysfactored into a contract between the consumer and provider.
Answer: C
NEW QUESTION 19
An internal audit department recently established a quality assurance (QA) program as part of its overall audit program. Which of the following activities is MOST important to include as part of the QA program requirements?
- A. Analyzing user satisfaction reports from business lines
- B. Conducting long-term planning for internal audit staffing
- C. Benchmarking the QA framework to international standards
- D. Reporting OA program results to the audit committee
Answer: A
NEW QUESTION 20
Who is responsible for the security of the physical infrastructure and virtualization platform?
- A. The cloud consumer
- B. The responsibility is split equally
- C. The majority is covered by the consumer
- D. Itdepends on the agreement
- E. The cloud provider
Answer: E
NEW QUESTION 21
Which of the following would be MOST important to update once a decision has been made to outsource a critical application to a cloud service provider?
- A. IT budget
- B. Business impact analysis (BIA)
- C. Project portfolio
- D. IT resource plan
Answer: B
NEW QUESTION 22
Which of the following is NOT a cloud computing characteristic that impacts incidence response?
- A. Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.
- B. The on demand self-service nature of cloud computing environments.
- C. The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.
- D. Object-based storage in a private cloud.
- E. The possibility of data crossing geographic or jurisdictional boundaries.
Answer: A
NEW QUESTION 23
Select the best definition of"compliance" from the options below.
- A. The timely and efficient filing of security reports.
- B. The diligent habits of good security practices and recording of the same.
- C. The development of a routine that covers all necessary security measures.
- D. The process of completing all forms and paperwork necessary to develop a defensible paper trail.
- E. The awareness and adherence to obligations, including the assessment and prioritization of corrective actions deemed necessary and appropriate.
Answer: E
NEW QUESTION 24
A third-party service provider is hosting a private cloud for an organization. Which of the following findings during an audit of the provider poses the GREATEST risk to the organization?
- A. The organization's virtual machines share the same hypervisor with virtual machines of other clients.
- B. 2% of backups had to be rescheduled due to backup media failures.
- C. Two different hypervisor versions are used due to the compatibility restrictions of some virtual machines.
- D. 5% of detected incidents exceeded the defined service level agreement (SLA) for escalation.
Answer: A
NEW QUESTION 25
Which of the following is NOT normally a method for detecting and preventing data migration into the cloud?
- A. URL filters
- B. Database Activity Monitoring
- C. Cloud Access and Security Brokers (CASB)
- D. Data Loss Prevention
- E. Intrusion Prevention System
Answer: E
NEW QUESTION 26
An important consideration when performing a remote vulnerability test of a cloud-based application is to
- A. Obtain provider permission for test
- B. Use techniques to evade cloud provider's detection systems
- C. Use network layer testing tools exclusively
- D. Use application layer testing tools exclusively
- E. Schedule vulnerability test at night
Answer: A
NEW QUESTION 27
Which statement best describes the impact of Cloud Computing on business continuity management?
- A. Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.
- B. Geographic redundancyensures that Cloud Providers provide highly available services.
- C. A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.
- D. Customers of SaaS providers in particular need to mitigate the risks of application lock-in.
- E. The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomesnecessary.
Answer: B
NEW QUESTION 28
What is true of security as it relates to cloud network infrastructure?
- A. You should implement a default deny with cloud firewalls.
- B. You should always open traffic between workloads in the same virtual subnet for better visibility.
- C. You should applycloud firewalls on a per-network basis.
- D. You should deploy your cloud firewalls identical to the existing firewalls.
- E. You should implement a default allow with cloud firewalls and then restrict as necessary.
Answer: A
NEW QUESTION 29
Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system''
- A. Data from the source and target system may be intercepted
- B. Data from the source and target system may have different data formats
- C. Records past their retention period may not be migrated to the new system
- D. System performance may be impacted by the migration
Answer: A
NEW QUESTION 30
......
Passing Key To Getting CCAK Certified Exam Engine PDF: https://www.dumpstorrent.com/CCAK-exam-dumps-torrent.html
CCAK Exam Dumps Pass with Updated Tests Dumps: https://drive.google.com/open?id=1dSx68le2JTdg2DTR7cKbV0LzKZ_YBeZa