Certificate of Cloud Auditing Knowledge (CCAK) Exam Questions

 The Certificate of Cloud Auditing Knowledge (CCAK) is brought to you by Cloud Security Alliance (CSA) and ISACA. PassQuestion new released high quality Certificate of Cloud Auditing Knowledge (CCAK) Exam Questions with verified answers that will help you save time and prepare well for the CCAK Certification test.Make sure to go through the detailed CCAK exam questions so you can prepare for the Certificate of Cloud Auditing Knowledge exam.We are confident that you will clear the real exam on your first attempt. Make sure to use our CCAK exam questions to prepare for the real exam. 

Certificate of Cloud Auditing Knowledge

The Certificate of Cloud Auditing Knowledge (CCAK) is the first credential available for industry professionals to demonstrate their expertise in the essential principles of auditing cloud computing systems. The CCAK credential and training program fills the gap in the market for technical education for cloud IT auditing.

This certificate fills a gap in the market for vendor neutral, technical education for IT audit, security, and risk professionals to understand unique cloud terminology, challenges, and solutions.There are no prerequisites to take the CCAK exam. Prior experience in IT audit, security, risk or cloud computing is essential to pass the CCAK exam. CCAK complements and enhances the knowledge of CCSK certificate holders.

Exam Information

• Number of Questions: 76 Multiple-choice
• Exam Length: 2 hours (120 minutes)
• Passing Score: 70%
• Exam Languages: English
• Exam Price: $395 Member / $495 Non-Member

Exam Domain

• Cloud Governance (18%)
• Cloud Compliance Program (21%)
• CCM and CAIQ: Goals, Objectives, and Structure (12%)
• A Threat Analysis Methodology for Cloud Using CCM (5%)
• Evaluating a Cloud Compliance Program (9%)
• Cloud Auditing (15%)
• CCM: Auditing Controls (8%)
• Continuous Assurance and Compliance (7%)
• STAR Program (5%)

View Online Certificate of Cloud Auditing Knowledge (CCAK) Free Questions

Which of the following BEST ensures adequate restriction on the number of people who can access the pipeline production environment?
A.Ensuring segregation of duties in the production and development pipelines.
B.Role-based access controls in the production and development pipelines.
C.Separation of production and development pipelines.
D.Periodic review of the Cl/CD pipeline audit logs to identify any access violations.
Answer:C

What is a sign of an organization that has adopted a shift-left concept of code release cycles?
A.A waterfall model to move resources through the development to release phases
B.Incorporation of automation to identify and address software code problems early
C.Maturity of start-up entities with high-iteration to low-volume code commits
D.Large entities with slower release cadences and geographical dispersed systems
Answer:B

Which of the following would be the GREATEST governance challenge to an organization where production is hosted in a public cloud and backups are held on the premises?
A.Aligning the cloud service delivery with the organization’s objective
B.Aligning the cloud provider’s SLA with the organization’s policy
C.Aligning shared responsibilities between provider and customer
D.Aligning the organization’s activity with the cloud provider’s policy
Answer:A

How should controls be designed by an organization?
A.By the internal audit team
B.Using the ISO27001 framework
C.By the cloud provider
D.Using the organization’s risk management framework
Answer:A

When using a SaaS solution, who is responsible for application security?
A.The cloud service provider only
B.The cloud service consumer only
C.Both cloud consumer and the enterprise
D.Both cloud provider and the consumer
Answer:A

Which of the following is an example of integrity technical impact?
A.The cloud provider reports a breach of customer personal data from an unsecured server.
B.A hacker using a stolen administrator identity alerts the discount percentage in the product database.
C.A DDoS attack renders the customer’s cloud inaccessible for 24 hours.
D.An administrator inadvertently click on Phish bait exposing his company to a ransomware attack.
Answer:D