Question 1

What business continuity considerations does a cloud customer need when implementing a cloud-based infrastructure?

Options :

A : Frequent review of cloud backups to ensure business continuity when needed

B : Review of cloud service provider contractual commitments to the main continuity of the provisioned service

C : Conducting of business continuity plan (BCP) and disaster recovery (DR) tests on the cloud service provider

D : Requirement for 100% uptime commitment from the cloud service provider at all times

Answer: B

Question 2

When cloud customers are unable to satisfy their payment obligations, which type of termination is triggered by the cloud service provider?

Options :

A : Termination for the missed payment

B : Termination at the end of the term

C : Termination for convenience

D : Termination for cause

Answer: D

Question 3

What data center and physical security measures should a cloud customer consider when assessing a cloud service provider?

Options :

A : Assess use of monitoring systems to control ingress and egress points of entry to the data center

B : Implement physical security perimeters to safeguard personnel, data and information systems.

C : Conduct a due diligence to verify the cloud provider applies adequate physical security measures.

D : Review internal policies and procedures for relocation of hardware and software to an offsite location

Answer: C

Question 4

Which of the following is a cloud-native solution designed to counter threats that do not exist within the enterprise?

Options :

A : Policy based access control

B : Attribute based access control

C : Rule based access control

D : Role based access control

Answer: A

Question 5

Which of the following is an example of integrity technical impact?

Options :

A : The cloud provider reports a breach of customer personal data from an unsecured server

B : A hacker using a stolen administrator identity alerts the discount percentage in the product database.

C : A DDoS attack renders the customer’s cloud inaccessible for 24 hours.

D : An administrator inadvertently clicked on Phish bait exposing his company to a ransomware attack.

Answer: B

Free CCAK Mock Exam – Practice Online Confidently