Question 1

Which of the following standards is MOST relevant for assurance over trust principles applicable to cloud security auditing?

Options :

A : ISO 27002

B : ISO 27001

C : SOC 2

D : SOC 1

Answer: C

Question 2

In a multi-level supply chain structure where cloud service provider A relies on other sub cloud services, the provider should ensure that any compliance requirements relevant to the provider are:

Options :

A : passed to the sub cloud service providers based on the sub cloud service providers’ geographic location.

B : passed to the sub cloud service providers

C : treated as confidential information and withheld from all sub cloud service providers.

D : treated as sensitive information and withheld from certain sub cloud service providers

Answer: A

Question 3

An external auditor is auditing a global organization located in Portugal that does business with a US-based organization in California. The auditor should verify that the global organization complies with which of the following regulations?

Options :

A : SOC 2

B : GDPR

C : HIPAA

D : CCPA

Answer: B

Question 4

An audit that evaluates the organization’s framework for defining requirements, performing risk assessments, monitoring controls, reporting adherence, and developing a strategic plan for the cloud is:

Options :

A : a compliance and controls audit.

B : configuration and activity monitoring.

C : a governance and strategy audit.

D : access review

Answer: C

Question 5

Which of the following is an example of a corrective control?

Options :

A : A central anti-virus system installing the latest signature files before allowing a connection to the network

B : Unsuccessful access attempts being automatically logged for investigation

C : Privileged access to critical information systems requiring a second factor of authentication using soft token

D : All new employees having standard access rights until their manager approves privileged rights

Answer: B

Free CCAK Mock Exam – Practice Online Confidently

Buying Options: