Free Practice Cloud Security Alliance CCAK Exam Questions 2025

Stay ahead with 100% Free Certificate of Cloud Auditing Knowledge CCAK Dumps Practice Questions

Page: 1 / 60

Total 299 Questions | Updated On: Apr 22, 2025

Add To Cart

Question 1

What legal documents should be provided to the auditors in relation to risk management?

A : Enterprise cloud strategy and policy

B : Contracts and service level agreements (SLAs) of cloud service providers

C : Policies and procedures established around third-party risk assessments

D : Inventory of third-party attestation reports

Answer: B

Question 2

What legal documents should be provided to the auditors in relation to risk management?

A : Enterprise cloud strategy and policy

B : Contracts and service level agreements (SLAs) of cloud service providers

C : Policies and procedures established around third-party risk assessments

D : Inventory of third-party attestation reports

Answer: B

Question 3

Which of the following is an example of reputational business impact?

A : While the breach was reported in a timely manner to the CEO, the CFO and CISO blamed each other in public, resulting in a loss of public confidence that led the board to replace all three.

B : The cloud provider fails to report a breach of customer personal data from an unsecured server, resulting in GDPR fines of 10 million euros.

C : A distributed denial of service (DDoS) attack renders the customer’s cloud inaccessible for 24 hours, resulting in millions in lost sales.

D : A hacker using a stolen administrator identity brings down the Software as a Service (SaaS) sales and marketing systems, resulting in the inability to process customer orders or manage customer relationships.

Answer: A

Question 4

Which of the following is an example of integrity technical impact?

A : The cloud provider reports a breach of customer personal data from an unsecured server

B : A hacker using a stolen administrator identity alerts the discount percentage in the product database.

C : A DDoS attack renders the customer’s cloud inaccessible for 24 hours.

D : An administrator inadvertently clicked on Phish bait exposing his company to a ransomware attack.

Answer: D

Question 5

The control domain feature within a Cloud Controls Matrix (CCM) represents:

A : CCM's ability to scan and check Active Directory, LDAP, and x.500 directories for suspicious and/or privileged user accounts.

B : CCM's ability to scan for anomalies in DNS zones in order to detect DNS spoofing, DNS hijacking, DNS cache poisoning, and similar threats.

C : a logical grouping of security controls addressing the same category of IT risks or information security concerns.

D : a set of application programming interfaces (APIs) that allows a cloud consumer to restrict the replication area within a well-defined jurisdictional perimeter.

Answer: C

Page: 1 / 60

Total 299 Questions | Updated On: Apr 22, 2025

Add To Cart