CCAK by ISACA Valid Free Exam Practice Test

Question 1

During the cloud service provider evaluation process, which of the following BEST helps identify baseline configuration requirements?

A. Contract terms and conditions B. Product benchmarks C. Vendor requirements D. Benchmark controls lists

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Which of the following is the BEST control framework for a European manufacturing corporation that is migrating to the cloud?

A. EUGDPR B. PCI-DSS C. NIST SP 800-53 D. CSA'sGDPRCoC

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

In a situation where duties related to cloud risk management and control are split between an organization and its cloud service providers, which of the following would BEST help to ensure a coordinated approach to risk and control processes?

A. Maintaining a centralized risk and controls dashboard B. Establishing a joint security operations center C. Co-locating compliance management specialists D. Automating reporting of risk and control compliance

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

What do cloud service providers offer to encourage clients to extend the cloud platform?

A. Access to the cloud infrastructure B. Reward programs C. Cloud console D. Application programming interfaces (APIs)

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

It is MOST important for an auditor to be aware that an inventory of assets within a cloud environment:

A. is fundamental for the security management program B. is not fundamental for the security management program, as this is a cloud service. C. can be a misleading source of data. D. should be mapped only if discovered during the audit.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

Which of the following is a PRIMARY benefit of using a standardized control framework?

A. It enables senior management to receive regular and detailed executive reports easily. B. It enables consultants to speed up the implementation of management systems, thus reducing costs. C. It enables auditors to assess an information system based on a well-defined set of controls. D. It enables the organization to implement an effective process of control measurement.

Correct Answer: C

Question 7

To ensure integration of security testing is implemented on large code sets in environments where time to completion is critical, what form of validation should an auditor expect?

A. Functional verification B. Regression testing C. Parallel testing D. Full application stack unit testing

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

Which of the following is the MOST relevant question in the cloud compliance program design phase?

A. Who owns the cloud strategy? B. Who owns the cloud portfolio strategy? C. Who owns the cloud services strategy? D. Who owns the cloud governance strategy?

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

Which of the following approaches encompasses social engineering of staff, bypassing of physical access controls, and penetration testing?

A. Blue team B. White box C. Gray box D. Red team

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 10

What is a sign that an organization has adopted a shift-left concept of code release cycles?

A. Large entities with slower release cadences and geographically dispersed systems B. A waterfall model to move resources through the development to release phases C. Maturity of start-up entities with high-iteration to low-volume code commits D. Incorporation of automation to identify and address software code problems early

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 11

The MOST important factor to consider when implementing cloud-related controls is the:

A. risk reporting. B. shared responsibility model. C. risk ownership D. effectiveness of the controls.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

ISACA Certificate of Cloud Auditing Knowledge - CCAK Exam Practice Test