Question 1

The control domain feature within a Cloud Controls Matrix (CCM) represents:

Options :

A : CCM-s ability to scan and check Active Directory, LDAP, and x.500 directories for suspicious and/or privileged user accounts.

B : CCM-s ability to scan for anomalies in DNS zones in order to detect DNS spoofing, DNS hijacking, DNS cache poisoning, and similar threats.

C : a logical grouping of security controls addressing the same category of IT risks or information security concerns.

D : a set of application programming interfaces (APIs) that allows a cloud consumer to restrict the replication area within a well-defined jurisdictional perimeter.

Answer: C

Question 2

In which control should a cloud service provider, upon request, inform customers of compliance impact and risk, especially if customer data is used as part of the services?

Options :

A : Service Provider control

B : Impact and Risk control

C : Data Inventory control

D : Compliance control

Answer: A

Question 3

Who would be BEST suited to mitigate on a daily basis the risk related to development and operations practices in a public cloud?

Options :

A : Risk management team

B : DevOps team

C : Internal audit team

D : Cloud infrastructure team

Answer: B

Question 4

Which of the following is the BEST way for a client to enforce a policy violation committed by a cloud service provider (CSP)?

Options :

A : The violation is agreed upon and documented

B : Nothing can be done to enforce violations as this is a cloud service.

C : The violation is agreed to verbally by the CSP.

D : Violations will be automatically enforced so no action is needed

Answer: A

Question 5

In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:

Options :

A : both operating system and application infrastructure contained within the CSP’s instances.

B : both operating system and application infrastructure contained within the customer’s instances

C : only application infrastructure contained within the CSP’s instances

D : only application infrastructure contained within the customer’s instances

Answer: B

Smartly Prepare Exam with Free Online CCAK Practice Test

Buying Options: