Question 1

Which of the following controls is MOST relevant for identifying cases of misuse when scripts are running in the background with minimal human oversight?

Options :

A : Additional manual testing

B : Segregation of duties

C : Increased regression testing

D : Additional monitoring

Answer: D

Question 2

Which of the following has been provided by the Federal Office for Information Security in Germany to support customers in selecting, controlling, and monitoring their cloud service providers?

Options :

A : German IDW PS 951

B : Multi-Tier Cloud Security (MTCS)

C : BSI Criteria Catalogue C5

D : BSI IT-basic protection catalogue

Answer: C

Question 3

With regard to the Cloud Controls Matrix (CCM), the Architectural Relevance is a feature that enables the filtering of security controls by:

Options :

A :

relevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal Enterprise Architecture Framework (FEAF), The Open Group Architecture Framework (TOGAF). and the Zachman Framework for Enterprise Architecture.

B : relevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClientBackend

C : relevant architectural components such as Physical, Network, Compute, Storage, Application, and Data.

D :

relevant delivery models such as Software as a Service (SaaS), Platform as a Service (PaaS), Infrastructure as a Service (laaS).

Answer: D

Question 4

While using public cloud services, cloud users may cede direct control over:

Options :

A : anti-malware solutions.

B : encryption keys.

C : security patching

D : penetration testing.

Answer: C

Question 5

Which of the following is a detective control that may be identified in a Software as a Service (SaaS) service provider?

Options :

A : Network segmentation

B : Incident management

C : Privileged access monitoring

D : Data encryption

Answer: C

Free CCAK Mock Exam – Practice Online Confidently

Buying Options: