ISACA CCAK Dumps in PDF and Online - Page: 3

QUESTION: 11 Exam Topic: Section 1

The PRIMARY objective of an audit initiation meeting with a cloud audit client is to:

select the methodology of the audit.
review requested evidence provided by the audit client.
discuss the scope of the cloud audit.
identify resource requirements of the cloud audit.

Answer(s): C

QUESTION: 12 Exam Topic: Section 1

Policies and procedures shall be established, and supporting business processes and technical measures implemented, for maintenance of several items ensuring continuity and availability of operations and support personnel. Which of the following controls BEST matches this control description?

Operations Maintenance
System Development Maintenance
Equipment Maintenance
System Maintenance

Answer(s): A

Reference:

https://www.sapidata.sm/img/cms/CAIQ_v3-1_2020-01-13.pdf (2)

Reveal Solution Next Question

QUESTION: 13 Exam Topic: Section 1

An auditor identifies that a CSP received multiple customer inquiries and RFPs during the last month. Which of the following should be the BEST recommendation to reduce the CSP burden?

CSP can share all security reports with customers to streamline the process.
CSP can schedule a call with each customer.
CSP can answer each customer individually.
CSP can direct all customers’ inquiries to the information in the CSA STAR registry.

Answer(s): D

Explanation:

Reference:

https://cloudsecurityalliance.org/star/registry/

Reveal Solution Next Question

QUESTION: 14 Exam Topic: Section 1

Which of the following approaches encompasses social engineering of staff, bypassing of physical access controls and penetration testing?

Blue team
White box
Gray box
Red team

Answer(s): B

Reference:

https://www.isaca.org/resources/isaca-journal/issues/2016/volume-5/planning-for-informationsecurity-testinga-practical-approach

Reveal Solution Next Question

QUESTION: 15 Exam Topic: Section 1

When applying the Top Threats Analysis methodology following an incident, what is the scope of the technical impact identification step?

Determine the impact on the controls that were selected by the organization to respond to identified risks.
Determine the impact on confidentiality, integrity and availability of the information system.
Determine the impact on the financial, operational, compliance and reputation of the organization.
Determine the impact on the physical and environmental security of the organization, excluding informational assets.

Answer(s): D

Reveal Solution Next Question

ISACA Certificate of Cloud Auditing Knowledge CCAK Dumps in PDF

Free ISACA CCAK Real Questions (page: 3)

QUESTION: 11 Exam Topic: Section 1

QUESTION: 12 Exam Topic: Section 1

Reference:

QUESTION: 13 Exam Topic: Section 1

Explanation:

Reference:

QUESTION: 14 Exam Topic: Section 1

Reference:

QUESTION: 15 Exam Topic: Section 1