CCAK PDF Dumps Real 2022 Recently Updated Questions
Released ISACA CCAK Updated Questions PDF
NEW QUESTION 15
Who is responsible for the security of the physical infrastructure and virtualization platform?
- A. The cloud consumer
- B. The responsibility is split equally
- C. The majority is covered by the consumer
- D. Itdepends on the agreement
- E. The cloud provider
Answer: E
NEW QUESTION 16
Which governance domain deals with evaluating how cloudcomputing affects compliance with internal security policies and various legal requirements, such as regulatory and legislative?
- A. Governance and Enterprise Risk Management
- B. Information Governance
- C. Legal Issues: Contracts and Electronic Discovery
- D. Compliance and Audit Management
- E. Infrastructure Security
Answer: D
NEW QUESTION 17
Which statement best describes why it is important to know how data is being accessed?
- A. The devices used to access data use a variety of applications or clients and may have different security characteristics.
- B. The device may affect data dispersion.
- C. The devices used to access data may have differentownership characteristics.
- D. The devices used to access data use a variety of operating systems and may have different programs installed on them.
- E. The devices used to access data have different storage formats.
Answer: A
NEW QUESTION 18
An important consideration when performing a remote vulnerability test of a cloud-based application is to
- A. Obtain provider permission for test
- B. Use techniques to evade cloud provider's detection systems
- C. Use network layer testing tools exclusively
- D. Use application layer testing tools exclusively
- E. Schedule vulnerability test at night
Answer: A
NEW QUESTION 19
APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.
- A. False
- B. True
Answer: B
NEW QUESTION 20
How can virtual machine communications bypass network security controls?
- A. VM images can contain rootkits programmed to bypass firewalls
- B. Most network security systems do not recognize encrypted VM traffic
- C. The guest OS can invoke stealth mode
- D. Hypervisors depend upon multiple network interfaces
- E. VM communications may use a virtual network on the same hardware host
Answer: E
NEW QUESTION 21
Which cloud storage technology is basically a virtual hard drive for instanced or VMs?
- A. Volume storage
- B. Object storage
- C. Platform
- D. Application
- E. Database
Answer: A
NEW QUESTION 22
Which of the following is the GREATEST concern associated with migrating computing resources to a cloud virtualized environment?
- A. An increase in the number of e-discovery requests
- B. An increase in inherent vulnerability
- C. An increase in the potential for data leakage
- D. An increase in residual risk
Answer: C
NEW QUESTION 23
To understand their compliance alignments and gaps with a cloud provider, what must cloud customers rely on?
- A. Provider documentation
- B. Provider run audits and reports
- C. Third-party attestations
- D. EDiscovery tools
- E. Provider and consumer contracts
Answer: C
NEW QUESTION 24
How is encryption managed on multi-tenant storage?
- A. C for data subject to the EU Data Protection Directive; B for all others
- B. Multiple keys per data owner
- C. Single key for all data owners
- D. One key per data owner
- E. The answer could be A, B, or C depending on the provider
Answer: D
NEW QUESTION 25
Which layer is the most important for securing because it is considered to be the foundation for secure cloud operations?
- A. Metastructure
- B. Infostructure
- C. Infrastructure
- D. Datastructure
- E. Applistructure
Answer: C
NEW QUESTION 26
ENISA: Lock-in is ranked as a high risk in ENISA research, a key underlying vulnerability causing lock in is:
- A. Lack of information onjurisdictions
- B. No source escrow agreement
- C. Unclear asset ownership
- D. Lack of completeness and transparency in terms of use
- E. Audit or certification not available to customers
Answer: D
NEW QUESTION 27
Sending data to a provider's storage over an API is likely as much morereliable and secure than setting up your own SFTP server on a VM in the same provider
- A. False
- B. True
Answer: B
NEW QUESTION 28
An IS department is evaluated monthly on its cost-revenue ratio user satisfaction rate, and computer downtime This is BEST zed as an application of.
- A. risk framework
- B. control self-assessment (CSA)
- C. value chain analysis
- D. balanced scorecard
Answer: D
NEW QUESTION 29
How does running applications on distinct virtual networks and only connecting networksas needed help?
- A. It enables you to configure applications around business groups
- B. It provides dynamic and granular policies with less management overhead
- C. It reduces hardware costs
- D. It reduces the blast radius of a compromised system
- E. It locks down access and provides stronger data security
Answer: D
NEW QUESTION 30
Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?
- A. Software Development Kits (SDKs)
- B. Application Binary Interface (ABI)
- C. Extensible Markup Language (XML)
- D. Application Programming Interface (API)
- E. Resource Description Framework (RDF)
Answer: D
NEW QUESTION 31
Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?
- A. PlannedOutages
- B. Chaos Engineering
- C. Resiliency Planning
- D. Expected Engineering
- E. Organized Downtime
Answer: B
NEW QUESTION 32
A third-party service provider is hosting a private cloud for an organization. Which of the following findings during an audit of the provider poses the GREATEST risk to the organization?
- A. The organization's virtual machines share the same hypervisor with virtual machines of other clients.
- B. 2% of backups had to be rescheduled due to backup media failures.
- C. Two different hypervisor versions are used due to the compatibility restrictions of some virtual machines.
- D. 5% of detected incidents exceeded the defined service level agreement (SLA) for escalation.
Answer: A
NEW QUESTION 33
Which attack surfaces, if any, does virtualization technology introduce?
- A. The hypervisor
- B. All of the above
- C. Configuration and VM sprawl issues
- D. Virtualization management components apart from the hypervisor
Answer: B
NEW QUESTION 34
Which statement best describes the impact of Cloud Computing on business continuity management?
- A. Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.
- B. Geographic redundancyensures that Cloud Providers provide highly available services.
- C. A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.
- D. Customers of SaaS providers in particular need to mitigate the risks of application lock-in.
- E. The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomesnecessary.
Answer: B
NEW QUESTION 35
During a review, an IS auditor notes that an organization's marketing department has purchased a cloud-based software application without following the procurement process. What should the auditor do FIRST?
- A. Review the procurement process.
- B. Escalate to senior management.
- C. Perform a risk analysis.
- D. Review the business impact analysis (BIA).
Answer: C
NEW QUESTION 36
Cloud services exhibit fiveessential characteristics that demonstrate their relation to, and differences from, traditional computing approaches. Which one of the five characteristics is described as: a consumer can unilaterally provision computing capabilities such as server time and network storage as needed.
- A. On-demand self-service
- B. Resource pooling
- C. Rapid elasticity
- D. Broad network access
- E. Measured service
Answer: A
NEW QUESTION 37
......
CCAK Dumps and Practice Test (78 Exam Questions): https://www.practicedump.com/CCAK_actualtests.html
Guide (New 2022) Actual ISACA CCAK Exam Questions: https://drive.google.com/open?id=14wSGg5tzPNWSvrO3KogUBfB32Ylh_et7