Free Access ISACA.CCAK.v2022-02-11.q57 Practice Test (Page 7)

Question 26

Which attack surfaces, if any, does virtualization technology introduce?

A.The hypervisor

B.All of the above

C.Virtualization management components apart from the hypervisor

D.Configuration and VM sprawl issues

Question 27

Which of the following should be of GREATEST concern to an IS auditor reviewing actions taken during a forensic investigation?

A.The investigation report does not indicate a conclusion.

B.An image copy of the attacked system was not taken.

C.The handling procedures of the attacked system are not documented.

D.The proper authorities were not notified.

Question 28

Which statement best describes the impact of Cloud Computing on business continuity management?

A.Customers of SaaS providers in particular need to mitigate the risks of application lock-in.

B.Clients need to do business continuity planning due diligence in case they suddenly need to switch providers.

C.The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomesnecessary.

D.A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.

E.Geographic redundancyensures that Cloud Providers provide highly available services.

Question 29

Which of the following would be the MOST critical finding of an application security and DevOps audit?

A.Application architecture and configurations did not consider security measures.

B.The organization is not using a unified framework to integrate cloud compliance with regulatory requirements.

C.Certifications with global security standards specific to cloud are not reviewed and the impact of noted findings are not assessed.

D.Outsourced cloud service interruption, breach or loss of data stored at the cloud service provider.

Question 30

CCM: A hypothetical company called: "Health4Sure" is located in the United States and provides cloud based services fortracking patient health. The company is compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so that they will be able to present this document topotential clients.
Which of the following approach would be most suitable to assess the overall security posture of Health4Sure's cloud service?

A.The CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls. This approach will save time.

B.The CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the security posture of their cloud service against each and every control in the CCM. This approach will allow a thorough assessment of the security posture.

C.The CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered as a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls thoroughly. This approach saves time while being able to assess the company's overall security posture in an efficient manner.

Other Version: 1878ISACA.CCAK.v2025-05-13.q213; 1470ISACA.CCAK.v2023-04-28.q71; 1464ISACA.CCAK.v2022-12-30.q72; 2191ISACA.CCAK.v2022-07-25.q75; 70ISACA.Passtestking.CCAK.v2021-10-20.by.jerry.27q.pdf

Latest Upload: 116NVIDIA.NCP-AAI.v2026-10-31.q44; 108GCCC.SCMP.v2026-10-31.q33; 141AICPA.FAR.v2026-10-30.q58; 266Microsoft.AI-103.v2026-10-29.q97; 162WGU.Introduction-to-Biology.v2026-10-29.q27; 345Microsoft.AZ-700.v2026-10-29.q224; 239Juniper.JN0-106.v2026-10-29.q110; 160Microsoft.AB-730.v2026-10-28.q81; 261Microsoft.PL-300.v2026-10-28.q356; 128ServiceNow.CIS-PA.v2026-10-28.q22

Question 26

Question 27

Question 28

Question 29

Question 30

Download PDF File