CCAK 試験問題を無料オンラインアクセス

Which of the following is the GREATEST risk associated with hidden interdependencies between cloud services?

• A.There is a lack of visibility over the cloud service providers' supply chain.
• B.The IT department does not clearly articulate the cloud to the organization.
• C.Customers do not understand cloud technologies in enough detail.
• D.Cloud services are very complicated.

Which of the following is an example of availability technical impact?

• A.A hacker using a stolen administrator identity alters the discount percentage in the product database.
• B.The cloud provider reports a breach of customer personal data from an unsecured server.
• C.A distributed denial of service (DDoS) attack renders the customer's cloud inaccessible for 24 hours.
• D.An administrator inadvertently clicked on phish bait, exposing the company to a ransomware attack

Which of the following is an example of financial business impact?

• A.While the breach was reported in a timely manner to the CEO, the CFO and CISO blamed each other in public consulting in a loss of public confidence that led the board to replace all three.
• B.A distributed denial of service (DDoS) attack renders the customer's cloud inaccessible for
  24 hours, resulting in millions in lost sales.
• C.A hacker using a stolen administrator identity brings down the Software of a Service (SaaS) sales and marketing systems, resulting in the inability to process customer orders or manage customer relationships.

From an auditor perspective, which of the following BEST describes shadow IT?

• A.A risk that jeopardizes business continuity planning
• B.A strength of disaster recovery (DR) planning
• C.An opportunity to diversify the cloud control approach
• D.A weakness in the cloud compliance posture

Regarding cloud service provider agreements and contracts, unless otherwise stated, the provider is:

• A.responsible to the cloud customer and its end users
• B.responsible only to the cloud customer.
• C.responsible to the cloud customer and its clients.
• D.not responsible at all to any external parties.