Tested Material Used To CCAK Test Engine Exam Questions in here [Oct-2021]
Penetration testers simulate CCAK exam PDF
NEW QUESTION 32
Which governance domain deals with evaluating how cloudcomputing affects compliance with internal security policies and various legal requirements, such as regulatory and legislative?
- A. Compliance and Audit Management
- B. Legal Issues: Contracts and Electronic Discovery
- C. Infrastructure Security
- D. Governance and Enterprise Risk Management
- E. Information Governance
Answer: A
NEW QUESTION 33
An IS auditor is a member of an application development team that is selecting software. Which of the following would impair the auditor's independence?
- A. Reviewing the request for proposal (RFP)
- B. verifying the weighting of each selection criteria
- C. Approving the vendor selection methodology
- D. Witnessing the vendor selection process
Answer: C
NEW QUESTION 34
An audit has identified that business units have purchased cloud-based applications without ITs support. What is the GREATEST risk associated with this situation?
- A. The application purchases did not follow procurement policy.
- B. The applications could be modified without advanced notice.
- C. The applications may not reasonably protect data.
- D. The applications are not included in business continuity plans (BCPs).
Answer: D
NEW QUESTION 35
What item below allows disparate directory services and independent security domains to be interconnected?
- A. Coalition
- B. Cloud
- C. Federation
- D. Union
- E. Intersection
Answer: C
NEW QUESTION 36
An IS department is evaluated monthly on its cost-revenue ratio user satisfaction rate, and computer downtime This is BEST zed as an application of.
- A. control self-assessment (CSA)
- B. value chain analysis
- C. risk framework
- D. balanced scorecard
Answer: D
NEW QUESTION 37
Which concept provides the abstraction needed for resource pools?
- A. Applistructure
- B. Hypervisor
- C. Virtualization
- D. Orchestration
- E. Metastructure
Answer: C
NEW QUESTION 38
Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system''
- A. Data from the source and target system may have different data formats
- B. Records past their retention period may not be migrated to the new system
- C. System performance may be impacted by the migration
- D. Data from the source and target system may be intercepted
Answer: D
NEW QUESTION 39
Cloud services exhibit fiveessential characteristics that demonstrate their relation to, and differences from, traditional computing approaches. Which one of the five characteristics is described as: a consumer can unilaterally provision computing capabilities such as server time and network storage as needed.
- A. On-demand self-service
- B. Measured service
- C. Broad network access
- D. Resource pooling
- E. Rapid elasticity
Answer: A
NEW QUESTION 40
Which layer is the most important for securing because it is considered to be the foundation for secure cloud operations?
- A. Applistructure
- B. Datastructure
- C. Infostructure
- D. Infrastructure
- E. Metastructure
Answer: D
NEW QUESTION 41
Which of the following cloud deployment models would BEST meet the needs of a startup software development organization with limited initial capital?
- A. Community
- B. Private
- C. Public
- D. Hybrid
Answer: C
NEW QUESTION 42
Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?
- A. More physical control over assets and processes.
- B. None of the above.
- C. Decreased requirement for proactive management of relationship and adherence to contracts.
- D. Increased need, but reduction in costs, for managing risks accepted by the cloud provider.
- E. Greater reliance on contracts, audits, and assessments due to lack of visibility or management.
Answer: E
NEW QUESTION 43
Which data security control is the LEAST likely to be assigned to an IaaSprovider?
- A. Application logic
- B. Encryption solutions
- C. Physical destruction
- D. Asset management and tracking
- E. Access controls
Answer: A
NEW QUESTION 44
Select the best definition of"compliance" from the options below.
- A. The development of a routine that covers all necessary security measures.
- B. The diligent habits of good security practices and recording of the same.
- C. The awareness and adherence to obligations, including the assessment and prioritization of corrective actions deemed necessary and appropriate.
- D. The timely and efficient filing of security reports.
- E. The process of completing all forms and paperwork necessary to develop a defensible paper trail.
Answer: C
NEW QUESTION 45
An important consideration when performing a remote vulnerability test of a cloud-based application is to
- A. Obtain provider permission for test
- B. Use application layer testing tools exclusively
- C. Schedule vulnerability test at night
- D. Use network layer testing tools exclusively
- E. Use techniques to evade cloud provider's detection systems
Answer: A
NEW QUESTION 46
If there are gaps in network logging data,what can you do?
- A. Nothing. The cloud provider must make the information available.
- B. Ask the cloud provider to open more ports.
- C. You can instrument the technology stack with your own logging.
- D. Nothing. There are simply limitations around the data that can be logged in the cloud.
- E. Ask the cloud provider to close more ports.
Answer: C
NEW QUESTION 47
How does running applications on distinct virtual networks and only connecting networksas needed help?
- A. It reduces hardware costs
- B. It enables you to configure applications around business groups
- C. It reduces the blast radius of a compromised system
- D. It locks down access and provides stronger data security
- E. It provides dynamic and granular policies with less management overhead
Answer: C
NEW QUESTION 48
......
Authentic Best resources for CCAK Online Practice Exam: https://www.dumpsfree.com/CCAK-valid-exam.html
Get the superior quality CCAK Dumps with explanations waiting just for you, get it now: https://drive.google.com/open?id=1G0z_EHUolgwsyxLxTXV8fv8XZy9J335v