Free Access ISACA.CCAK.v2023-04-28.q71 Practice Test (Page 6)

Question 21

CCM: In the CCM tool, ais a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

A.Domain

B.Control Specification

C.Risk Impact

Question 22

Which of the following is the BEST recommendation to offer an organization's HR department planning to adopt a new public SaaS application to ease the recruiting process?

A.Implement a cloud access security broker

B.Do not allow data to be in cleratext

C.Ensure HIPAA compliance

D.Consult the legal department

Question 23

How is encryption managed on multi-tenant storage?

A.The answer could be A, B, or C depending on the provider

B.Single key for all data owners

C.Multiple keys per data owner

D.One key per data owner

E.C for data subject to the EU Data Protection Directive; B for all others

Question 24

Under GDPR, an organization should report a data breach within what time frame?

A.48 hours

B.1 week

C.2 weeks

D.72 hours

Question 25

What should be an organization's control audit schedule of a cloud service provider's business continuity plan and operational resilience policy?

A.Annual

B.Semi-annual

C.Monthly

D.Quarterly

Other Version: 398ISACA.CCAK.v2025-05-13.q213; 887ISACA.CCAK.v2022-12-30.q72; 1620ISACA.CCAK.v2022-07-25.q75; 1595ISACA.CCAK.v2022-02-11.q57; 70ISACA.Passtestking.CCAK.v2021-10-20.by.jerry.27q.pdf

Latest Upload: 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 156TheSecOpsGroup.CNSP.v2025-09-08.q20; 207CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 144Salesforce.Data-Architect.v2025-09-05.q216; 136Adobe.AD0-E605.v2025-09-05.q50; 177Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File