CCAK Exam Questions and Answers | Exam-Dumps (Page: 9)

QUESTION: 41 Exam Topic: Section 1

When using a SaaS solution, who is responsible for application security?

The cloud service provider only
The cloud service consumer only
Both cloud consumer and the enterprise
Both cloud provider and the consumer

Answer(s): A

Explanation:

Reference:

https://www.paloaltonetworks.com/cyberpedia/cloud-security-is-a-sharedresponsibility#:~: text=SaaS%3A%20SaaS%20vendors%20are%20primarily,how%20customers%20use%20the%20applications

Reveal Solution Next Question

QUESTION: 42 Exam Topic: Section 1

Which of the following would be the GREATEST governance challenge to an organization where production is hosted in a public cloud and backups are held on the premises?

Aligning the cloud service delivery with the organization’s objective
Aligning the cloud provider’s SLA with the organization’s policy
Aligning shared responsibilities between provider and customer
Aligning the organization’s activity with the cloud provider’s policy

Answer(s): A

Reference:

https://arxiv.org/ftp/arxiv/papers/1303/1303.4814.pdf

Reveal Solution Next Question

QUESTION: 43 Exam Topic: Section 1

What aspect of SaaS functionality and operations would the cloud customer be responsible for and should be audited?

Access controls
Vulnerability management
Source code reviews
Patching

Answer(s): A

Reference:

https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=919233

Reveal Solution Next Question

QUESTION: 44 Exam Topic: Section 1

The Open Certification Framework is structured on three levels of trust. Those three levels of trust are:

CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Compliance
CSA STAR Audit, STAR Certification & Attestation (Third-party Assessment), STAR Continuous
CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Monitoring and Control
CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Continuous

Answer(s): D

Reference:

https://www.cloudwatchhub.eu/cloud-security-alliance-open-certification-framework

Reveal Solution Next Question

QUESTION: 45 Exam Topic: Section 1

Which of the following is a fundamental concept of FedRAMP that intends to save costs, time, and staff conducting superfluous agency security assessments?

Use often, provide many times
Be economical, act deliberately
Use existing, provide many times
Do once, use many times

Answer(s): D

Explanation:

Reference:

https://www.fedramp.gov/assets/resources/documents/FedRAMP_Security_Assessment_Framework.pdf (2)

Reveal Solution Next Question

ISACA CCAK Exam (page: 9) ISACA Certificate of Cloud Auditing Knowledge Updated on: 15-Feb-2026

QUESTION: 41 Exam Topic: Section 1

Explanation:

Reference:

QUESTION: 42 Exam Topic: Section 1

Reference:

QUESTION: 43 Exam Topic: Section 1

Reference:

QUESTION: 44 Exam Topic: Section 1

Reference:

QUESTION: 45 Exam Topic: Section 1

Explanation:

Reference:

ISACA CCAK Exam (page: 9)
ISACA Certificate of Cloud Auditing Knowledge
Updated on: 15-Feb-2026