ISACA Certificate of Cloud Auditing Knowledge - CCAK Exam Questions

QUESTION NO: 1
Which of the following should be an assurance requirement when an organization is migrating to a Software as a Service (SaaS) provider?

QUESTION NO: 2
"Network environments and virtual instances shall be designed and configured to restrict and monitor traffic between trusted and untrusted connections. These configurations shall be reviewed at least annually, and supported by a documented justification for use for all allowed services, protocols, ports, and by compensating controls." Which of the following types of controls BEST matches this control description?

QUESTION NO: 3
Which of the following would be the MOST critical finding of an application security and DevOps audit?

QUESTION NO: 4
Which objective is MOST appropriate to measure the effectiveness of password policy?

QUESTION NO: 5
To qualify for CSA STAR attestation for a particular cloud system, the SOC 2 report must cover:

QUESTION NO: 6
Which of the following are the three MAIN phases of the Cloud Controls Matrix (CCM) mapping methodology?

QUESTION NO: 7
Controls mapping found in the Scope Applicability column of the Cloud Controls Matrix (CCM) may help organizations to realize cost savings:

QUESTION NO: 8
Which of the following is a good candidate for continuous auditing?