Download Certificate of Cloud Auditing Knowledge.CCAK.ExamTopics.2026-10-15.271q.vcex

Vendor: ISACA
Exam Code: CCAK
Exam Name: Certificate of Cloud Auditing Knowledge
Date: Oct 15, 2026
File Size: 1 MB
Download Exam

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAMFILESCOM

Discount: 20%

ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator
ProfExam Discount

Demo Questions

Question 1
With regard to the Cloud Control Matrix (CCM), the ‘Architectural Relevance’ is a feature that enables the filtering of security controls by:
  1. relevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal Enterprise Architecture Framework (FEAF), The Open Group Architecture Framework (TOGAF), and the Zachman Framework for Enterprise Architecture.
  2. relevant delivery models such as Software as a Service, Platform as a Service, Infrastructure as a Service.
  3. relevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClient-Backend.
  4. relevant architectural components such as Physical, Network, Compute, Storage, Application, and Data.
Correct answer: D
Question 2
An organization deploying the Cloud Control Matrix (CCM) to perform a compliance assessment will encompass the use of the “Corporate Governance Relevance” feature to filter out those controls:
  1. relating to policies, processes, laws, regulations, and institutions conditioning the way an organization is managed, directed, or controlled.
  2. that can be either of a management or of a legal nature, therefore requiring an approval from the Change Advisory Board.
  3. that require the prior approval from the Board of Directors to be funded (for either make or buy), implemented, and reported on.
  4. that can be either of an administrative or of a technical nature, therefore requiring an approval from the Change Advisory Board.
Correct answer: A
Question 3
A certification target helps in the formation of a continuous certification framework by incorporating:
  1. CSA STAR level 2 attestation.
  2. service level objective and service qualitative objective.
  3. frequency of evaluating security attributes.
  4. scope description and security attributes to be tested.
Correct answer: D
Question 4
A contract containing the phrase “You automatically consent to these terms by using or logging into the service to which they pertain” is establishing a contract of:
  1. exclusion.
  2. adhesion.
  3. exclusively.
  4. execution.
Correct answer: B
Question 5
A large organization with subsidiaries in multiple locations has a business requirement to organize IT systems to have identified resources reside in particular locations with organizational personnel. Which access control method will allow IT personnel to be segregated across the various locations?
  1. Role Based Access Control
  2. Attribute Based Access Control
  3. Policy Based Access Control
  4. Rule Based Access Control
Correct answer: A
Question 6
Which of the following standards is designed to be used by organizations for cloud services that intend to select controls within the process of implementing an Information Security Management System based on ISO/IEC 27001?
  1. ISO/IEC 27017:2015
  2. CSA Cloud Control Matrix (CCM)
  3. NIST SP 800-146
  4. ISO/IEC 27002
Correct answer: D
Question 7
Which of the following is the BEST recommendation to offer an organization’s HR department planning to adopt a new public SaaS application to ease the recruiting process?
  1. Ensure HIPAA compliance
  2. Implement a cloud access security broker
  3. Consult the legal department
  4. Do not allow data to be in cleratext
Correct answer: C
Question 8
The BEST way to deliver continuous compliance in a cloud environment is to:
  1. decrease the interval between attestations of compliance.
  2. combine point-in-time assurance approaches with continuous monitoring.
  3. increase the frequency of external audits from annual to quarterly.
  4. combine point-in-time assurance approaches with continuous auditing.
Correct answer: D
Question 9
Which of the following is an important challenge in the design and building of a cloud compliance program?
  1. Determining the total cost of all cloud components
  2. Identifying all cloud components used in the organization
  3. Assigning risk ownership for the cloud components
  4. Understanding the cloud computing context
Correct answer: C
Question 10
Which of the following is a detective control that may be identified in a Software as a Service (SaaS) service provider?
  1. Network segmentation
  2. Incident management
  3. Privileged access monitoring
  4. Data encryption
Correct answer: C
CONNECT US
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!