No Result
View All Result
IT Quesion Library
Contribute
No Result
View All Result
No Result
View All Result

 


Questions › Category: CCAK
Filter:AllUnanswered
When performing audits in relation to Business Continuity Management and Operational Resilience strategy, what would be the MOST critical aspect to audit in relation to the strategy of the cloud customer that should be formulated jointly with the cloud service provider?
Admin asked 5 months ago • 
6 views0 answers0 votes
Which of the following metrics are frequently immature?
Admin asked 5 months ago • 
6 views0 answers0 votes
Policies and procedures shall be established, and supporting business processes and technical measures implemented, for maintenance of several items ensuring continuity and availability of operations and support personnel. Which of the following controls BEST matches this control description?
Admin asked 5 months ago • 
8 views0 answers0 votes
Which of the following approaches encompasses social engineering of staff, bypassing of physical access controls and penetration testing?
Admin asked 5 months ago • 
12 views0 answers0 votes
When applying the Top Threats Analysis methodology following an incident, what is the scope of the technical impact identification step?
Admin asked 5 months ago • 
11 views0 answers0 votes
SAST testing is performed by:
Admin asked 5 months ago • 
10 views0 answers0 votes
Organizations maintain mappings between the different control frameworks they adopt to:
Admin asked 5 months ago • 
8 views0 answers0 votes
After finding a vulnerability in an internet-facing server of an organization, a cybersecurity criminal is able to access an encrypted file system and successfully manages to overwrite part of some files with random data. In reference to the Top Threats Analysis methodology, how would you categorize the technical impact of this incident?
Admin asked 5 months ago • 
12 views0 answers0 votes
In an organization, how are policy violations MOST likely to occur?
Admin asked 5 months ago • 
9 views0 answers0 votes
Cloud Control Matrix (CCM) controls can be used by cloud customers to:
Admin asked 5 months ago • 
10 views0 answers0 votes
Network environments and virtual instances shall be designed and configured to restrict and monitor traffic between trusted and untrusted connections. These configurations shall be reviewed at least annually, and supported by a documented justification for use for all allowed services, protocols, ports, and by compensating controls. Which of the following controls BEST matches this control description?
Admin asked 5 months ago • 
11 views0 answers0 votes
Which of the following is an example of integrity technical impact?
Admin asked 5 months ago • 
10 views0 answers0 votes
Due to cloud audit team resource constraints, an audit plan as initially approved cannot be completed. Assuming that the situation is communicated in the cloud audit report, which course of action is MOST relevant?
Admin asked 5 months ago • 
12 views0 answers0 votes
To qualify for CSA STAR attestation for a particular cloud system, the SOC 2 report must cover:
Admin asked 5 months ago • 
8 views0 answers0 votes
A CSP contracts for a penetration test to be conducted on its infrastructures. The auditor engages the target with no prior knowledge of its defenses, assets, or channels. The CSP’s security operation center is not notified in advance of the scope of the audit and the test vectors. Which mode is selected by the CSP?
Admin asked 5 months ago • 
11 views0 answers0 votes
Which of the following is MOST important to consider when an organization is building a compliance program for the cloud?
Admin asked 5 months ago • 
7 views0 answers0 votes
Changes to which of the following will MOST likely influence the expansion or reduction of controls required to remediate the risk arising from changes to an organization’s SaaS vendor?
Admin asked 5 months ago • 
16 views0 answers0 votes
While performing the audit, the auditor found that an object storage bucket containing PII could be accessed by anyone on the Internet. Given this discovery, what should be the most appropriate action for the auditor to perform?
Admin asked 5 months ago • 
9 views0 answers0 votes
From the perspective of a senior cloud security audit practitioner in an organization of a mature security program with cloud adoption, which of the following statements BEST describes the DevSecOps concept?
Admin asked 5 months ago • 
11 views0 answers0 votes
Which of the following is an example of financial business impact?
Admin asked 5 months ago • 
9 views0 answers0 votes
123…8Next »

Other exams

No Result
View All Result

Welcome Back!

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In