CCAK 試験問題を無料オンラインアクセス

To support a customer's verification of the cloud service provider claims regarding its responsibilities according to the shared responsibility model, which of the following tools and techniques is appropriate?

• A.Contractual agreement
• B.External audit
• C.Security assessment
• D.Internal audit

With regard to the Cloud Controls Matrix (CCM), the Architectural Relevance is a feature that enables the filtering of security controls by:

• A.relevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClient-Backend.
• B.relevant architectural components such as Physical, Network, Compute, Storage, Application, and Data.
• C.relevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal Enterprise Architecture Framework (FEAF), The Open Group Architecture Framework (TOGAF). and the Zachman Framework for Enterprise Architecture.
• D.relevant delivery models such as Software as a Service (SaaS), Platform as a Service (PaaS), Infrastructure as a Service (laaS).

Which of the following is a cloud-specific security standard?

• A.15027701
• B.15027017
• C.15014001
• D.15022301

Which of the following has the MOST substantial impact on how aggressive or conservative the cloud approach of an organization will be?

• A.Applicable laws and regulations
• B.Risk appetite and budget constraints
• C.Internal policies and technical standards
• D.Risk scoring criteria

Which of the following is the BEST tool to perform cloud security control audits?

• A.ISO 27001
• B.Federal Information Processing Standard (FIPS) 140-2
• C.Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM)
• D.General Data Protection Regulation (GDPR)