Online Access Free CCAK Practice Test

Which of the following principles, when combined with a structured development methodology, would BEST contribute to the consistent introduction of secure and compliant Software as a Service (SaaS) solutions in an organization?

• A.Least privilege
• B.Fail safe defaults
• C.Least common mechanism
• D.Security by design

When developing a cloud compliance program, what is the PRIMARY reason for a cloud customer

• A.To determine the total cost of the cloud services to be deployed
• B.To confirm which vendor will be selected based on compliance with security requirements
• C.To determine how those services will fit within its policies and procedures
• D.To confirm whether the compensating controls implemented are sufficient for the cloud services

Which of the following is the MOST relevant question in the cloud compliance program design phase?

• A.Who owns the cloud strategy?
• B.Who owns the cloud governance strategy?
• C.Who owns the cloud portfolio strategy?
• D.Who owns the cloud services strategy?

Which of the following BEST ensures adequate restriction on the number of people who can access the pipeline production environment?

• A.Separation of production and development pipelines
• B.Periodic review of the continuous integration and continuous delivery (CI/CD) pipeline audit logs to identify any access violations
• C.Role-based access controls in the production and development pipelines
• D.Ensuring segregation of duties in the production and development pipelines

From a compliance perspective, which of the following artifacts should an assessor review when evaluating the effectiveness of Infrastructure as Code deployments?

• A.SOC reports
• B.Interviews
• C.logs
• D.Evaluation summaries