CCAK Dumps PDF New [2021] Ultimate Study Guide
CCAK Exam Dumps PDF Updated Dump from VCEEngine Guaranteed Success
NEW QUESTION 26
To understand their compliance alignments and gaps with a cloud provider, what must cloud customers rely on?
- A. Provider run audits and reports
- B. Provider and consumer contracts
- C. Third-party attestations
- D. EDiscovery tools
- E. Provider documentation
Answer: C
NEW QUESTION 27
Who is responsible for the security of the physical infrastructure and virtualization platform?
- A. Itdepends on the agreement
- B. The responsibility is split equally
- C. The majority is covered by the consumer
- D. The cloud consumer
- E. The cloud provider
Answer: E
NEW QUESTION 28
APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.
- A. True
- B. False
Answer: A
NEW QUESTION 29
All cloud services utilize virtualization technologies.
- A. True
- B. False
Answer: A
NEW QUESTION 30
ENISA: Lock-in is ranked as a high risk in ENISA research, a key underlying vulnerability causing lock in is:
- A. Lack of information onjurisdictions
- B. Unclear asset ownership
- C. Lack of completeness and transparency in terms of use
- D. Audit or certification not available to customers
- E. No source escrow agreement
Answer: C
NEW QUESTION 31
Sending data to a provider's storage over an API is likely as much morereliable and secure than setting up your own SFTP server on a VM in the same provider
- A. True
- B. False
Answer: A
NEW QUESTION 32
ENISA: "VMhopping" is:
- A. Lack of vulnerability management standards.
- B. Instability in VM patch management causing VM routing errors.
- C. Improper management of VM instances, causing customer VMs to be commingled with other customer systems.
- D. Using a compromised VM to exploit a hypervisor, used to take control of other VMs.
- E. Looping within virtualized routing systems.
Answer: D
NEW QUESTION 33
What is true of security as it relates to cloud network infrastructure?
- A. You should always open traffic between workloads in the same virtual subnet for better visibility.
- B. You should applycloud firewalls on a per-network basis.
- C. You should implement a default allow with cloud firewalls and then restrict as necessary.
- D. You should implement a default deny with cloud firewalls.
- E. You should deploy your cloud firewalls identical to the existing firewalls.
Answer: D
NEW QUESTION 34
Segregation of duties would be compromised if:
- A. database administrators (DBAs) modified the structure of user tables.
- B. application programmers accessed test data.
- C. application programmers moved programs into production.
- D. operations staff modified batch schedules.
Answer: B
NEW QUESTION 35
Your cloud and on-premisesinfrastructures should always use the same network address ranges.
- A. True
- B. False
Answer: B
NEW QUESTION 36
If there are gaps in network logging data,what can you do?
- A. Ask the cloud provider to open more ports.
- B. Nothing. There are simply limitations around the data that can be logged in the cloud.
- C. You can instrument the technology stack with your own logging.
- D. Nothing. The cloud provider must make the information available.
- E. Ask the cloud provider to close more ports.
Answer: C
NEW QUESTION 37
Which of the following should be an IS auditor's GREATEST concern when reviewing an outsourcing arrangement with a third-party cloud service provider to host personally identifiable data?
- A. Fees are charged based on the volume of data stored by the host.
- B. The organization's servers are not compatible with the third party's infrastructure
- C. The outsourcing contract does not contain a right-to-audit clause.
- D. The data is not adequately segregated on the host platform.
Answer: D
NEW QUESTION 38
What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?
- A. The actualsize of the data and the storage format
- B. The language of the data and how it affects the user
- C. The fragmentation and encryption algorithms employed
- D. The implications of storing complex information on simple storage systems
- E. Thephysical location of the data and how it is accessed
Answer: D
NEW QUESTION 39
Big data includes high volume, high variety, and high velocity.
- A. True
- B. False
Answer: A
NEW QUESTION 40
Your SLA with your cloudprovider ensures continuity for all services.
- A. True
- B. False
Answer: B
NEW QUESTION 41
ENISA: A reason for risk concerns of a cloud provider being acquired is:
- A. Resource isolation may fail
- B. Non-binding agreements put at risk
- C. Arbitrary contract termination by acquiring company
- D. Provider may change physical location
- E. Mass layoffs may occur
Answer: B
NEW QUESTION 42
......
Pass Your ISACA Exam with CCAK Exam Dumps: https://www.vceengine.com/CCAK-vce-test-engine.html
CCAK Exam Dumps - ISACA Practice Test Questions: https://drive.google.com/open?id=1HU3ghmG-fYjrJK2Qk9-O9bUWTq0PhGy3
