CCAK 試験問題を無料オンラインアクセス

Which of the following cloud environments should be a concern to an organization s cloud auditor?

• A.The failover region of the cloud service provider is on another continent
• B.The technical team is trained on only one vendor Infrastructure as a Service (laaS) platform, but the organization has subscribed to another vendor's laaS platform as an alternative.
• C.The organization entirely depends on several proprietary Software as a Service (SaaS) applications.
• D.The cloud service provider s data center is more than 100 miles away.

From a compliance perspective, which of the following artifacts should an assessor review when evaluating the effectiveness of Infrastructure as Code deployments?

• A.Evaluation summaries
• B.SOC reports
• C.logs
• D.Interviews

organization should document the compliance responsibilities and ownership of accountability in a RACI chart or its informational equivalents in order to:

• A.provide a holistic and seamless view of the cloud service provider's responsibility for compliance with prevailing laws and regulations.
• B.define the cloud compliance requirements and how they interplay with the organization's business strategy, goals, and other compliance requirements.
• C.conform to the organization's governance model.
• D.provide a holistic and seamless view of the enterprise's responsibility for compliance with prevailing laws and regulations.

The MOST critical concept for managing the building and testing of code in DevOps is:

• A.continuous integration.
• B.continuous deployment.
• C.continuous delivery.
• D.continuous build.

Which of the following should be an assurance requirement when an organization is migrating to a Software as a Service (SaaS) provider?

• A.Amount of server storage
• B.Type of network technology
• C.Access controls
• D.Location of data