Question 1

The MAIN difference between Cloud Control Matrix (CCM) and Consensus Assessment Initiative Questionnaire (CAIQ) is that:

Options :

A : CCM assesses the presence of controls, whereas CAIQ assesses overall security of a service.

B : CCM has a set of security questions, whereas CAIQ has a set of security controls.

C : CCM has 14 domains and CAIQ has 16 domains.

D : CCM provides a controls framework, whereas CAIQ provides industry-accepted ways to document which security controls exist in IaaS, PaaS, and SaaS offerings.

Answer: D

Question 2

To qualify for CSA STAR attestation for a particular cloud system, the SOC 2 report must cover:

Options :

A : ISO/IЕС 27001: 2013 controls

B : maturity model criteria

C :

all Cloud Controls Matrix (CCM) controls and TSPC security principles.

D : Cloud Control Matrix (CCM) and ISO/IEC 27001:2013 controls.

Answer: C

Question 3

Which of the following is MOST relevant to determine whether an organization is a risk taker or is risk-averse?

Options :

A : Risk management methodology

B : Risk culture

C : Risk heat map

D : Risk appetite

Answer: D

Question 4

"Network environments and virtual instances shall be designed and configured to restrict and monitor traffic between trusted and untrusted connections. These configurations shall be reviewed at least annually, and supported by a documented justification for use for all allowed services, protocols, ports, and by compensating controls." Which of the following types of controls BEST matches this control description?

Options :

A : Network Security

B : Change Detection

C : Virtual Instance and OS Hardening

D : Network Vulnerability Management

Answer: A

Question 5

Cloud Controls Matrix (CCM) controls can be used by cloud customers to:

Options :

A : develop new security baselines for the industry.

B : define different control frameworks for different cloud service providers.

C : facilitate communication with their legal department.

D : build an operational cloud risk management program.

Answer: D

Higher Test Marks with Free Online CCAK Exam Practice

Buying Options: