[Oct 02, 2021] Get Free Updates Up to 365 days On Developing CCAK Braindumps
Best Quality ISACA CCAK Exam Questions
NEW QUESTION 30
Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system''
- A. Data from the source and target system may have different data formats
- B. Records past their retention period may not be migrated to the new system
- C. System performance may be impacted by the migration
- D. Data from the source and target system may be intercepted
Answer: D
NEW QUESTION 31
Which of thefollowing items is NOT an example of Security as a Service (SecaaS)?
- A. Authentication
- B. Provisioning
- C. Intrusion detection
- D. Spam filtering
- E. Web filtering
Answer: B
NEW QUESTION 32
Which of the following should be the PRIMARY concern of an IS auditor during a review of an external IT service level agreement (SLA) for computer operations?
- A. Lack of software escrow provisions
- B. Vendor has exclusive control of IT resources
- C. No employee succession plan
- D. Changes in services are not tracked
Answer: D
NEW QUESTION 33
Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?
- A. Software Development Kits (SDKs)
- B. Application Programming Interface (API)
- C. Resource Description Framework (RDF)
- D. Application Binary Interface (ABI)
- E. Extensible Markup Language (XML)
Answer: B
NEW QUESTION 34
What is the newer application development methodology and philosophy focused on automation of application development and deployment?
- A. SecDevOps
- B. DevOps
- C. Agile
- D. BusOps
- E. Scrum
Answer: B
NEW QUESTION 35
What item below allows disparate directory services and independent security domains to be interconnected?
- A. Coalition
- B. Cloud
- C. Federation
- D. Union
- E. Intersection
Answer: C
NEW QUESTION 36
How does running applications on distinct virtual networks and only connecting networksas needed help?
- A. It reduces hardware costs
- B. It enables you to configure applications around business groups
- C. It reduces the blast radius of a compromised system
- D. It locks down access and provides stronger data security
- E. It provides dynamic and granular policies with less management overhead
Answer: C
NEW QUESTION 37
Network logs from cloud providers are typically flow records, not full packet captures.
- A. True
- B. False
Answer: A
NEW QUESTION 38
An organization recently implemented a cloud document storage solution and removed the ability for end users to save data to their local workstation hard drives Which of the following findings should be the IS auditor's GREATEST concern?
- A. Mobile devices are not encrypted.
- B. Users have not been trained on the new system.
- C. Users are not required to sign updated acceptable
- D. The business continuity plan (BCP) was not updated.
Answer: D
NEW QUESTION 39
How does virtualized storage help avoid data loss if a drive fails?
- A. Drives are backed up, swapped, and archived constantly
- B. Data loss is unavoidable with drive failures
- C. Full back ups weekly
- D. Multiple copies indifferent locations
- E. Incremental backups daily
Answer: D
NEW QUESTION 40
What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?
- A. The fragmentation and encryption algorithms employed
- B. Thephysical location of the data and how it is accessed
- C. The actualsize of the data and the storage format
- D. The language of the data and how it affects the user
- E. The implications of storing complex information on simple storage systems
Answer: E
NEW QUESTION 41
Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?
- A. More physical control over assets and processes.
- B. None of the above.
- C. Decreased requirement for proactive management of relationship and adherence to contracts.
- D. Increased need, but reduction in costs, for managing risks accepted by the cloud provider.
- E. Greater reliance on contracts, audits, and assessments due to lack of visibility or management.
Answer: E
NEW QUESTION 42
Cloud services exhibit fiveessential characteristics that demonstrate their relation to, and differences from, traditional computing approaches. Which one of the five characteristics is described as: a consumer can unilaterally provision computing capabilities such as server time and network storage as needed.
- A. On-demand self-service
- B. Measured service
- C. Broad network access
- D. Resource pooling
- E. Rapid elasticity
Answer: A
NEW QUESTION 43
To understand their compliance alignments and gaps with a cloud provider, what must cloud customers rely on?
- A. Provider and consumer contracts
- B. EDiscovery tools
- C. Third-party attestations
- D. Provider run audits and reports
- E. Provider documentation
Answer: C
NEW QUESTION 44
ENISA: A reason for risk concerns of a cloud provider being acquired is:
- A. Mass layoffs may occur
- B. Resource isolation may fail
- C. Provider may change physical location
- D. Non-binding agreements put at risk
- E. Arbitrary contract termination by acquiring company
Answer: D
NEW QUESTION 45
......
ISACA Exam Practice Test To Gain Brilliante Result: https://www.prepawaypdf.com/ISACA/CCAK-practice-exam-dumps.html
Tested Material Used To CCAK: https://drive.google.com/open?id=1mDhG8jNihzZVrwTLnlMfnjVCNQexoCgS