Free ISACA CCAK Exam Dumps Questions & Answers

Which of the following is the PRIMARY component to determine the success or failure of an organization's cloud compliance program?

• A.Determining the risk treatment options to be used in the compliance program
• B.Defining the metrics and indicators to monitor the implementation of the compliance program
• C.Selecting the external frameworks that will be used as reference
• D.Mapping who possesses the information and data that should drive the compliance goals

Which of the following helps an organization to identify control gaps and shortcomings in the context of cloud computing?

• A.Monitoring effectiveness
• B.Periodic documentation review
• C.Walk-through peer review
• D.User security awareness training

Account design in the cloud should be driven by:

• A.security requirements.
• B.management structure.
• C.organizational structure.
• D.business continuity policies.

Which of the following is the BEST recommendation to offer an organization's HR department planning to adopt a new public Software as a Service (SaaS) application to ease the recruiting process?

• A.Do not allow data to be in clear text.
• B.Implement a cloud access security broker (CASB).
• C.Ensure HIPAA compliance.
• D.Consult the legal department.

Controls mapping found in the Scope Applicability column of the Cloud Controls Matrix (CCM) may help organizations to realize cost savings:

• A.by avoiding the need to hire a cloud security specialist to perform the periodic risk assessment exercise.
• B.by implementing layered security, thus reducing the likelihood of data breaches and the associated costs.
• C.by avoiding fines for breaching those regulations that impose a controls mapping in order to prove compliance
• D.by avoiding duplication of efforts in the compliance evaluation and for the eventual control design and implementation.