CCAK Braindumps PDF, ISACA CCAK Exam Cram
New 2021 CCAK Sample Questions Reliable CCAK Test Engine
NEW QUESTION 22
Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?
- A. Increased need, but reduction in costs, for managing risks accepted by the cloud provider.
- B. Greater reliance on contracts, audits, and assessments due to lack of visibility or management.
- C. None of the above.
- D. Decreased requirement for proactive management of relationship and adherence to contracts.
- E. More physical control over assets and processes.
Answer: B
NEW QUESTION 23
When deploying an application that was created using the programming language and tools supported by the cloud provider, the MOST appropriate cloud computing model for an organization to adopt is:
- A. Identity as a Service (IDaaS).
- B. Infrastructure as a Service (laaS).
- C. Platform as a Service (PaaS).
- D. Software as a Service (SaaS).
Answer: C
NEW QUESTION 24
Why is a service type of network typically isolated on different hardware?
- A. It requires distinct access controls
- B. It requires unique security
- C. It manages resource pools for cloud consumers
- D. It has distinct functions from other networks
- E. It manages the traffic between other networks
Answer: E
NEW QUESTION 25
ENISA: "VMhopping" is:
- A. Lack of vulnerability management standards.
- B. Looping within virtualized routing systems.
- C. Instability in VM patch management causing VM routing errors.
- D. Using a compromised VM to exploit a hypervisor, used to take control of other VMs.
- E. Improper management of VM instances, causing customer VMs to be commingled with other customer systems.
Answer: D
NEW QUESTION 26
Which of the following cloud deployment models would BEST meet the needs of a startup software development organization with limited initial capital?
- A. Public
- B. Community
- C. Hybrid
- D. Private
Answer: A
NEW QUESTION 27
Which of the following is the GREATEST concern associated with migrating computing resources to a cloud virtualized environment?
- A. An increase in the number of e-discovery requests
- B. An increase in inherent vulnerability
- C. An increase in the potential for data leakage
- D. An increase in residual risk
Answer: C
NEW QUESTION 28
What is true of security as it relates to cloud network infrastructure?
- A. You should implement a default deny with cloud firewalls.
- B. You should always open traffic between workloads in the same virtual subnet for better visibility.
- C. You should applycloud firewalls on a per-network basis.
- D. You should deploy your cloud firewalls identical to the existing firewalls.
- E. You should implement a default allow with cloud firewalls and then restrict as necessary.
Answer: A
NEW QUESTION 29
Which of the following would be MOST important to update once a decision has been made to outsource a critical application to a cloud service provider?
- A. IT budget
- B. Business impact analysis (BIA)
- C. Project portfolio
- D. IT resource plan
Answer: B
NEW QUESTION 30
Which of the following should be of GREATEST concern to an IS auditor reviewing actions taken during a forensic investigation?
- A. An image copy of the attacked system was not taken.
- B. The investigation report does not indicate a conclusion.
- C. The proper authorities were not notified.
- D. The handling procedures of the attacked system are not documented.
Answer: C
NEW QUESTION 31
Cloud services exhibit fiveessential characteristics that demonstrate their relation to, and differences from, traditional computing approaches. Which one of the five characteristics is described as: a consumer can unilaterally provision computing capabilities such as server time and network storage as needed.
- A. On-demand self-service
- B. Resource pooling
- C. Rapid elasticity
- D. Broad network access
- E. Measured service
Answer: A
NEW QUESTION 32
APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.
- A. False
- B. True
Answer: B
NEW QUESTION 33
Dynamic Application Security Testing (DAST) might be limited or require pre-testing permission from the provider.
- A. False
- B. True
Answer: B
NEW QUESTION 34
Your SLA with your cloudprovider ensures continuity for all services.
- A. False
- B. True
Answer: A
NEW QUESTION 35
What is resource pooling?
- A. Internet-based CPUs are pooled to enable multi-threading.
- B. Placing Internet ("cloud") data centers near multiple sources of energy, such as hydroelectric dams.
- C. None of the above.
- D. The dedicated computing resources of each client are pooled together in a colocation facility.
- E. The provider's computing resources are pooled to serve multiple consumers.
Answer: E
NEW QUESTION 36
All cloud services utilize virtualization technologies.
- A. False
- B. True
Answer: B
NEW QUESTION 37
How does virtualized storage help avoid data loss if a drive fails?
- A. Full back ups weekly
- B. Incremental backups daily
- C. Drives are backed up, swapped, and archived constantly
- D. Multiple copies indifferent locations
- E. Data loss is unavoidable with drive failures
Answer: D
NEW QUESTION 38
Sending data to a provider's storage over an API is likely as much morereliable and secure than setting up your own SFTP server on a VM in the same provider
- A. False
- B. True
Answer: B
NEW QUESTION 39
Which attack surfaces, if any, does virtualization technology introduce?
- A. The hypervisor
- B. All of the above
- C. Configuration and VM sprawl issues
- D. Virtualization management components apart from the hypervisor
Answer: B
NEW QUESTION 40
......
Feel ISACA CCAK Dumps PDF Will likely be The best Option: https://www.exam-killer.com/CCAK-valid-questions.html
CCAK exam torrent ISACA study guide: https://drive.google.com/open?id=1aLcR1Xu0dS7mqvnFklDWpnO9zIn5IOFH
