Free Access ISACA.CCAK.v2022-12-30.q72 Practice Test (Page 15)

Question 66

A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?

A.A support table

B.An entitlement matrix

C.An entrylog

D.An access log

E.A validation process

Question 67

Cloud Control Matrix (CCM) controls can be used by cloud customers to:

A.define different control frameworks for different cloud service providers.

B.build an operational cloud risk management program.

C.develop new security baselines for the industry.

D.facilitate communication with their legal department.

Question 68

Which of the following key stakeholders should be identified the earliest when an organization is designing a cloud compliance program?

A.Internal control function

B.Cloud process owners

C.Cloud strategy owners

D.Legal functions

Question 69

While performing the audit, the auditor found that an object storage bucket containing PII could be accessed by anyone on the Internet. Given this discovery, what should be the most appropriate action for the auditor to perform?

A.Asking the organization's cloud administrator to immediately close the gap by updating the configuration settings and making the object storage bucket private and hence inaccessible from the Internet

B.Highlighting the gap to the audit sponsor at the sponsor's earliest possible availability

C.Informing the organization's internal audit manager immediately about the gap

D.Documenting the finding in the audit report and sharing the gap with the relevant stakeholders

Question 70

Prioritizing assurance activities for an organization's cloud services portfolio depends PRIMARILY on an organization's ability to:

A.collate views from various business functions using cloud services.

B.maintain a comprehensive cloud service inventory.

C.schedule frequent reviews with high-risk cloud service providers.

D.develop plans using a standardized risk-based approach.

Other Version: 1878ISACA.CCAK.v2025-05-13.q213; 1468ISACA.CCAK.v2023-04-28.q71; 2190ISACA.CCAK.v2022-07-25.q75; 2091ISACA.CCAK.v2022-02-11.q57; 70ISACA.Passtestking.CCAK.v2021-10-20.by.jerry.27q.pdf

Latest Upload: 112NVIDIA.NCP-AAI.v2026-10-31.q44; 104GCCC.SCMP.v2026-10-31.q33; 139AICPA.FAR.v2026-10-30.q58; 266Microsoft.AI-103.v2026-10-29.q97; 162WGU.Introduction-to-Biology.v2026-10-29.q27; 345Microsoft.AZ-700.v2026-10-29.q224; 239Juniper.JN0-106.v2026-10-29.q110; 160Microsoft.AB-730.v2026-10-28.q81; 260Microsoft.PL-300.v2026-10-28.q356; 128ServiceNow.CIS-PA.v2026-10-28.q22

Question 66

Question 67

Question 68

Question 69

Question 70

Download PDF File