Question 1

Which of the following is the common cause of misconfiguration in a cloud environment?

Options :

A : Absence of effective change control

B : Using multiple cloud service providers

C : New cloud computing techniques

D : Traditional change process mechanisms

Answer: A

Question 2

With regard to the Cloud Controls Matrix (CCM), the Architectural Relevance is a feature that enables the filtering of security controls by:

Options :

A :

relevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal Enterprise Architecture Framework (FEAF), The Open Group Architecture Framework (TOGAF). and the Zachman Framework for Enterprise Architecture.

B : relevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClientBackend

C : relevant architectural components such as Physical, Network, Compute, Storage, Application, and Data.

D :

relevant delivery models such as Software as a Service (SaaS), Platform as a Service (PaaS), Infrastructure as a Service (laaS).

Answer: D

Question 3

What is below the waterline in the context of cloud operationalization?

Options :

A : The controls operated by the cloud access security broker (CASB)

B : The controls operated by both

C : The controls operated by the customer

D : The controls operated by the cloud service provider

Answer: D

Question 4

In which control should a cloud service provider, upon request, inform customers of compliance impact and risk, especially if customer data is used as part of the services?

Options :

A : Service Provider control

B : Impact and Risk control

C : Data Inventory control

D : Compliance control

Answer: A

Question 5

organization should document the compliance responsibilities and ownership of accountability in a RACI chart or its informational equivalents in order to:

Options :

A : conform to the organization-s governance model.

B : define the cloud compliance requirements and how they interplay with the organization-s business strategy, goals, and other compliance requirements.

C : provide a holistic and seamless view of the enterprise-s responsibility for compliance with prevailing laws and regulations.

D : provide a holistic and seamless view of the cloud service provider-s responsibility for compliance with prevailing laws and regulations.

Answer: C

Free CCAK Mock Exam – Practice Online Confidently

Buying Options: