100% Free CCAK Practice Exam Questions and Answers

Stay Ahead with Latest CCAK CSA Cloud Security Practice Test Questions 2026

Page: 1 / 60

Total 299 Questions | Updated On: Sep 25, 2026

Add To Cart

Question 1

Which of the following is an example of availability technical impact?

A : A distributed denial of service (DDoS) attack renders the customer's cloud inaccessible for 24 hours.

B : The cloud provider reports a breach of customer personal data from an unsecured server.

C : An administrator inadvertently clicked on phish bait, exposing the company to a ransomware attack.

D : A hacker using a stolen administrator identity alters the discount percentage in the product database

Answer: A

Question 2

An auditor is assessing a European organization's compliance. Which regulation is suitable if health information needs to be protected?

A : GDPR

B : DPIA

C : DPA

D : HIPAA

Answer: A

Question 3

With regard to the Cloud Controls Matrix (CCM), the Architectural Relevance is a feature that enables the filtering of security controls by:

A : relevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal Enterprise Architecture Framework (FEAF), The Open Group Architecture Framework (TOGAF). and the Zachman Framework for Enterprise Architecture.

B : relevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClientBackend

C : relevant architectural components such as Physical, Network, Compute, Storage, Application, and Data.

D : relevant delivery models such as Software as a Service (SaaS), Platform as a Service (PaaS), Infrastructure as a Service (laaS).

Answer: D

Question 4

When mapping controls to architectural implementations, requirements define:

A : control objectives.

B : control activities.

C : guidelines.

D : policies.

Answer: B

Question 5

Which of the following is an example of reputational business impact?

A : While the breach was reported in a timely manner to the CEO, the CFO and CISO blamed each other in public, resulting in a loss of public confidence that led the board to replace all three.

B : The cloud provider fails to report a breach of customer personal data from an unsecured server, resulting in GDPR fines of 10 million euros.

C : A distributed denial of service (DDoS) attack renders the customer’s cloud inaccessible for 24 hours, resulting in millions in lost sales.

D : A hacker using a stolen administrator identity brings down the Software as a Service (SaaS) sales and marketing systems, resulting in the inability to process customer orders or manage customer relationships.

Answer: A

Page: 1 / 60

Total 299 Questions | Updated On: Sep 25, 2026

Add To Cart