2021 CCAK Premium Files Test pdf - Free Dumps Collection
Get ready to pass the CCAK Exam right now using our Cloud Security Alliance Exam Package
NEW QUESTION 21
In which type of environment is it impractical to allow the customer to conduct their own audit, making it important that the data center operators are required to provide auditing for the customers?
- A. Long distance relationships
- B. Single tenantenvironments
- C. Multi-tenant environments
- D. Distributed computing arrangements
- E. Multi-application, single tenant environments
Answer: C
NEW QUESTION 22
If there are gaps in network logging data,what can you do?
- A. Nothing. The cloud provider must make the information available.
- B. Ask the cloud provider to open more ports.
- C. You can instrument the technology stack with your own logging.
- D. Nothing. There are simply limitations around the data that can be logged in the cloud.
- E. Ask the cloud provider to close more ports.
Answer: C
NEW QUESTION 23
Which cloud storage technology is basically a virtual hard drive for instanced or VMs?
- A. Application
- B. Object storage
- C. Platform
- D. Database
- E. Volume storage
Answer: E
NEW QUESTION 24
In volume storage, what method is often used to support resiliency and security?
- A. hypervisor agents
- B. random placement
- C. data dispersion
- D. data rights management
- E. proxy encryption
Answer: C
NEW QUESTION 25
Who is responsible for the security of the physical infrastructure and virtualization platform?
- A. The cloud provider
- B. The responsibility is split equally
- C. The majority is covered by the consumer
- D. Itdepends on the agreement
- E. The cloud consumer
Answer: A
NEW QUESTION 26
When deploying Security as a Service in a highly regulated industry or environment, what should bothparties agree on in advance and include in the SLA?
- A. The metrics defining the service level required to achieve regulatory objectives.
- B. The duration of time that a security violation can occur before the client begins assessing regulatory fines.
- C. The cost per incident for security breaches of regulated information.
- D. The type of security software which meets regulations and the number of licenses that will be needed.
- E. The regulations that are pertinent to the contract and how to circumvent them.
Answer: A
NEW QUESTION 27
Your cloud and on-premisesinfrastructures should always use the same network address ranges.
- A. False
- B. True
Answer: A
NEW QUESTION 28
Which of the following would be MOST important to update once a decision has been made to outsource a critical application to a cloud service provider?
- A. IT budget
- B. Business impact analysis (BIA)
- C. Project portfolio
- D. IT resource plan
Answer: B
NEW QUESTION 29
What is true of security as it relates to cloud network infrastructure?
- A. You should implement a default allow with cloud firewalls and then restrict as necessary.
- B. You should applycloud firewalls on a per-network basis.
- C. You should deploy your cloud firewalls identical to the existing firewalls.
- D. You should always open traffic between workloads in the same virtual subnet for better visibility.
- E. You should implement a default deny with cloud firewalls.
Answer: E
NEW QUESTION 30
Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?
- A. Software Development Kits (SDKs)
- B. Application Programming Interface (API)
- C. Resource Description Framework (RDF)
- D. Application Binary Interface (ABI)
- E. Extensible Markup Language (XML)
Answer: B
NEW QUESTION 31
What is the newer application development methodology and philosophy focused on automation of application development and deployment?
- A. SecDevOps
- B. DevOps
- C. Agile
- D. BusOps
- E. Scrum
Answer: B
NEW QUESTION 32
A third-party service provider is hosting a private cloud for an organization. Which of the following findings during an audit of the provider poses the GREATEST risk to the organization?
- A. Two different hypervisor versions are used due to the compatibility restrictions of some virtual machines.
- B. 5% of detected incidents exceeded the defined service level agreement (SLA) for escalation.
- C. The organization's virtual machines share the same hypervisor with virtual machines of other clients.
- D. 2% of backups had to be rescheduled due to backup media failures.
Answer: C
NEW QUESTION 33
Network logs from cloud providers are typically flow records, not full packet captures.
- A. True
- B. False
Answer: A
NEW QUESTION 34
An internal audit department recently established a quality assurance (QA) program as part of its overall audit program. Which of the following activities is MOST important to include as part of the QA program requirements?
- A. Reporting OA program results to the audit committee
- B. Benchmarking the QA framework to international standards
- C. Conducting long-term planning for internal audit staffing
- D. Analyzing user satisfaction reports from business lines
Answer: D
NEW QUESTION 35
What is defined as the process by which an opposing party may obtain private documents for use in litigation?
- A. Custody
- B. Subpoena
- C. Scope
- D. Discovery
- E. Risk Assessment
Answer: D
NEW QUESTION 36
Which data security control is the LEAST likely to be assigned to an IaaSprovider?
- A. Application logic
- B. Encryption solutions
- C. Physical destruction
- D. Asset management and tracking
- E. Access controls
Answer: A
NEW QUESTION 37
Which statement best describes why it is important to know how data is being accessed?
- A. The devices used to access data have different storage formats.
- B. The devices used to access data may have differentownership characteristics.
- C. The devices used to access data use a variety of operating systems and may have different programs installed on them.
- D. The device may affect data dispersion.
- E. The devices used to access data use a variety of applications or clients and may have different security characteristics.
Answer: E
NEW QUESTION 38
All cloud services utilize virtualization technologies.
- A. True
- B. False
Answer: A
NEW QUESTION 39
How does running applications on distinct virtual networks and only connecting networksas needed help?
- A. It reduces hardware costs
- B. It enables you to configure applications around business groups
- C. It reduces the blast radius of a compromised system
- D. It locks down access and provides stronger data security
- E. It provides dynamic and granular policies with less management overhead
Answer: C
NEW QUESTION 40
Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?
- A. Organized Downtime
- B. PlannedOutages
- C. Resiliency Planning
- D. Chaos Engineering
- E. Expected Engineering
Answer: D
NEW QUESTION 41
......
Master 2021 Latest The Questions Cloud Security Alliance and Pass CCAK Real Exam!: https://www.prep4pass.com/CCAK_exam-braindumps.html
A fully updated 2021 CCAK Exam Dumps exam guide from training expert Prep4pass: https://drive.google.com/open?id=113nLWiuCO-KKqV-l2N6Yql48wGJKpXe0
