Free Practice Cloud Security Alliance CCAK Exam Questions 2025

Stay ahead with 100% Free Certificate of Cloud Auditing Knowledge CCAK Dumps Practice Questions

Page: 1 / 60

Total 299 Questions | Updated On: Apr 10, 2025

Add To Cart

Question 1

From an auditor perspective, which of the following BEST describes shadow IT?

A : An opportunity to diversify the cloud control approach

B : A weakness in the cloud compliance posture

C : A strength of disaster recovery (DR) planning

D : A risk that jeopardizes business continuity planning

Answer: D

Question 2

Which of the following is an example of reputational business impact?

A : While the breach was reported in a timely manner to the CEO, the CFO and CISO blamed each other in public, resulting in a loss of public confidence that led the board to replace all three.

B : The cloud provider fails to report a breach of customer personal data from an unsecured server, resulting in GDPR fines of 10 million euros.

C : A distributed denial of service (DDoS) attack renders the customer’s cloud inaccessible for 24 hours, resulting in millions in lost sales.

D : A hacker using a stolen administrator identity brings down the Software as a Service (SaaS) sales and marketing systems, resulting in the inability to process customer orders or manage customer relationships.

Answer: A

Question 3

Which of the following is an example of a corrective control?

A : A central anti-virus system installing the latest signature files before allowing a connection to the network

B : Unsuccessful access attempts being automatically logged for investigation

C : Privileged access to critical information systems requiring a second factor of authentication using soft token

D : All new employees having standard access rights until their manager approves privileged rights

Answer: C

Question 4

An auditor is assessing a European organization's compliance. Which regulation is suitable if health information needs to be protected?

A : GDPR

B : DPIA

C : DPA

D : HIPAA

Answer: A

Question 5

An auditor is reviewing an organization’s virtual machines (VMs) hosted in the cloud. The organization utilizes a configuration management (CM) tool to enforce password policies on its VMs. Which of the following is the BEST approach for the auditor to use to review the operating effectiveness of the password requirement?

A : The auditor should not rely on the CM tool and its settings, and for thoroughness should review the password configuration on the set of sample VMs.

B : Review the relevant configuration settings on the CM tool and check whether the CM tool agents are operating effectively on the sample VMs.

C : As it is an automated environment, reviewing the relevant configuration settings on the CM tool would be sufficient.

D : Review the incident records for any incidents relating to brute force attacks or password compromise in the last 12 months and investigate whether the root cause of the incidents was due to in appropriate password policy configured on the VMs.

Answer: B

Page: 1 / 60

Total 299 Questions | Updated On: Apr 10, 2025

Add To Cart