Online Access Free CCAK Practice Test

To support a customer's verification of the cloud service provider claims regarding its responsibilities according to the shared responsibility model, which of the following tools and techniques is appropriate?

• A.External audit
• B.Security assessment
• C.Internal audit
• D.Contractual agreement

Which of the following methods can be used by a cloud service provider with a cloud customer that does not want to share security and control information?

• A.Nondisclosure agreements (NDAs)
• B.Industry certifications
• C.Independent auditor report
• D.First-party audit

Organizations maintain mappings between the different control frameworks they adopt to:

• A.start a compliance assessment using the latest assessment.
• B.help identify controls with different assessment status.
• C.help identify controls with common assessment status.
• D.avoid duplication of work when assessing compliance,

Application programming interfaces (APIs) are likely to be attacked continuously by bad actors because they:

• A.are generally the most exposed part.
• B.could be poorly designed.
• C.act as a very effective backdoor.
• D.are the asset with private IP addresses.

In all three cloud deployment models, (laaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?

• A.Cloud service provider
• B.Shared responsibility
• C.Patching on hypervisor layer not required
• D.Cloud service customer