CCAK Free Certification Exam Material from BraindumpsIT with 78 Questions

Use Real CCAK - 100% Cover Real Exam Questions 

NEW QUESTION 45
What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?

• A. Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.
• B. Maintaining customer managed key management and revoking ordeleting keys from the key management system to prevent the data from being accessed again.
• C. Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.
• D. Both B and D.
• E. Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

Answer: B

 

NEW QUESTION 46
What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?

• A. The fragmentation and encryption algorithms employed
• B. Thephysical location of the data and how it is accessed
• C. The actualsize of the data and the storage format
• D. The language of the data and how it affects the user
• E. The implications of storing complex information on simple storage systems

Answer: E

 

NEW QUESTION 47
APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

• A. True
• B. False

Answer: A

 

NEW QUESTION 48
An IS auditor is a member of an application development team that is selecting software. Which of the following would impair the auditor's independence?

• A. Reviewing the request for proposal (RFP)
• B. verifying the weighting of each selection criteria
• C. Approving the vendor selection methodology
• D. Witnessing the vendor selection process

Answer: C

 

NEW QUESTION 49
Segregation of duties would be compromised if:

• A. operations staff modified batch schedules.
• B. database administrators (DBAs) modified the structure of user tables.
• C. application programmers accessed test data.
• D. application programmers moved programs into production.

Answer: C

 

NEW QUESTION 50
What is resource pooling?

• A. The dedicated computing resources of each client are pooled together in a colocation facility.
• B. None of the above.
• C. Placing Internet ("cloud") data centers near multiple sources of energy, such as hydroelectric dams.
• D. Internet-based CPUs are pooled to enable multi-threading.
• E. The provider's computing resources are pooled to serve multiple consumers.

Answer: E

 

NEW QUESTION 51
An audit has identified that business units have purchased cloud-based applications without ITs support. What is the GREATEST risk associated with this situation?

• A. The application purchases did not follow procurement policy.
• B. The applications could be modified without advanced notice.
• C. The applications may not reasonably protect data.
• D. The applications are not included in business continuity plans (BCPs).

Answer: D

 

NEW QUESTION 52
Which statement best describes the impact of Cloud Computing on business continuity management?

• A. Geographic redundancyensures that Cloud Providers provide highly available services.
• B. Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.
• C. The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomesnecessary.
• D. A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.
• E. Customers of SaaS providers in particular need to mitigate the risks of application lock-in.

Answer: A

 

NEW QUESTION 53
ENISA: "VMhopping" is:

• A. Improper management of VM instances, causing customer VMs to be commingled with other customer systems.
• B. Using a compromised VM to exploit a hypervisor, used to take control of other VMs.
• C. Looping within virtualized routing systems.
• D. Lack of vulnerability management standards.
• E. Instability in VM patch management causing VM routing errors.

Answer: B

 

NEW QUESTION 54
How does running applications on distinct virtual networks and only connecting networksas needed help?

• A. It reduces hardware costs
• B. It enables you to configure applications around business groups
• C. It reduces the blast radius of a compromised system
• D. It locks down access and provides stronger data security
• E. It provides dynamic and granular policies with less management overhead

Answer: C

 

NEW QUESTION 55
Which of the following is the GREATEST concern associated with migrating computing resources to a cloud virtualized environment?

• A. An increase in inherent vulnerability
• B. An increase in residual risk
• C. An increase in the potential for data leakage
• D. An increase in the number of e-discovery requests

Answer: C

 

NEW QUESTION 56
Which of the following cloud deployment models would BEST meet the needs of a startup software development organization with limited initial capital?

• A. Community
• B. Private
• C. Public
• D. Hybrid

Answer: C

 

NEW QUESTION 57
Which of the following is NOT normally a method for detecting and preventing data migration into the cloud?

• A. URL filters
• B. Database Activity Monitoring
• C. Data Loss Prevention
• D. Cloud Access and Security Brokers (CASB)
• E. Intrusion Prevention System

Answer: E

 

NEW QUESTION 58
Big data includes high volume, high variety, and high velocity.

• A. True
• B. False

Answer: A

 

NEW QUESTION 59
In volume storage, what method is often used to support resiliency and security?

• A. hypervisor agents
• B. random placement
• C. data dispersion
• D. data rights management
• E. proxy encryption

Answer: C

 

NEW QUESTION 60
An organization recently implemented a cloud document storage solution and removed the ability for end users to save data to their local workstation hard drives Which of the following findings should be the IS auditor's GREATEST concern?

• A. Mobile devices are not encrypted.
• B. Users have not been trained on the new system.
• C. Users are not required to sign updated acceptable
• D. The business continuity plan (BCP) was not updated.

Answer: D

 

NEW QUESTION 61
Cloud services exhibit fiveessential characteristics that demonstrate their relation to, and differences from, traditional computing approaches. Which one of the five characteristics is described as: a consumer can unilaterally provision computing capabilities such as server time and network storage as needed.

• A. On-demand self-service
• B. Measured service
• C. Broad network access
• D. Resource pooling
• E. Rapid elasticity

Answer: A

 

NEW QUESTION 62
In which type of environment is it impractical to allow the customer to conduct their own audit, making it important that the data center operators are required to provide auditing for the customers?

• A. Long distance relationships
• B. Single tenantenvironments
• C. Multi-tenant environments
• D. Distributed computing arrangements
• E. Multi-application, single tenant environments

Answer: C

 

NEW QUESTION 63
Your cloud and on-premisesinfrastructures should always use the same network address ranges.

• A. False
• B. True

Answer: A

 

NEW QUESTION 64
......

Dumps Brief Outline Of The CCAK Exam: https://www.braindumpsit.com/CCAK_real-exam.html

CCAK Training & Certification Get Latest Cloud Security Alliance : https://drive.google.com/open?id=1Pw0G_tiO23GPv4YxMbKIJCX_NIFwY6Vf