Free Access ISACA.CCAK.v2022-02-11.q57 Practice Test (Page 10)

Question 41

Supply chain agreements between CSP and cloud customers should, at minimum, include:

A.Audits, assessments and independent verification of compliance certifications with agreement terms

B.Policies and procedures of the cloud customer

C.Organization chart of the CSP

D.Regulatory guidelines impacting the cloud customer

Question 42

Changes to which of the following will MOST likely influence the expansion or reduction of controls required to remediate the risk arising from changes to an organization's SaaS vendor?

A.Risk appetite

B.Risk exceptions policy

C.Contractual requirements

D.Board oversight

Question 43

When deploying Security as a Service in a highly regulated industry or environment, what should bothparties agree on in advance and include in the SLA?

A.The duration of time that a security violation can occur before the client begins assessing regulatory fines.

B.The regulations that are pertinent to the contract and how to circumvent them.

C.The type of security software which meets regulations and the number of licenses that will be needed.

D.The cost per incident for security breaches of regulated information.

E.The metrics defining the service level required to achieve regulatory objectives.

Question 44

When applying the Top Threats Analysis methodology following an incident, what is the scope of the technical impact identification step?

A.Determine the impact on confidentiality, integrity and availability of the information system.

B.Determine the impact on the controls that were selected by the organization to respond to identified risks.

C.Determine the impact on the financial, operational, compliance and reputation of the organization.

D.Determine the impact on the physical and environmental security of the organization, excluding informational assets.

Question 45

A cloud service provider does not allow audits using automated tools as these tools could be considered destructive techniques for the cloud environment. Which of the following aspects of the audit will be constrained?

A.Purpose

B.Objectives

C.Nature of relationship

D.Scope

Other Version: 1878ISACA.CCAK.v2025-05-13.q213; 1470ISACA.CCAK.v2023-04-28.q71; 1464ISACA.CCAK.v2022-12-30.q72; 2191ISACA.CCAK.v2022-07-25.q75; 70ISACA.Passtestking.CCAK.v2021-10-20.by.jerry.27q.pdf

Latest Upload: 116NVIDIA.NCP-AAI.v2026-10-31.q44; 108GCCC.SCMP.v2026-10-31.q33; 141AICPA.FAR.v2026-10-30.q58; 266Microsoft.AI-103.v2026-10-29.q97; 162WGU.Introduction-to-Biology.v2026-10-29.q27; 345Microsoft.AZ-700.v2026-10-29.q224; 239Juniper.JN0-106.v2026-10-29.q110; 160Microsoft.AB-730.v2026-10-28.q81; 261Microsoft.PL-300.v2026-10-28.q356; 128ServiceNow.CIS-PA.v2026-10-28.q22

Question 41

Question 42

Question 43

Question 44

Question 45

Download PDF File