CCAK 무료 덤프문제 온라인 액세스

Supply chain agreements between a cloud service provider and cloud customers should, at a minimum, include:

• A.audits, assessments, and independent verification of compliance certifications with agreement terms.
• B.regulatory guidelines impacting the cloud customer.
• C.policies and procedures of the cloud customer
• D.the organizational chart of the provider.

Regarding suppliers of a cloud service provider, it is MOST important for the auditor to be aware that the:

• A.suppliers are accountable for the provider's service that they are providing.
• B.client organization and provider are both responsible for the provider's suppliers.
• C.client organization has a clear understanding of the provider's suppliers.
• D.client organization does not need to worry about the provider's suppliers, as this is the provider's responsibility.

Organizations maintain mappings between the different control frameworks they adopt to:

• A.help identify controls with different assessment status.
• B.avoid duplication of work when assessing compliance,
• C.help identify controls with common assessment status.
• D.start a compliance assessment using the latest assessment.

Which of the following is MOST important to consider when an organization is building a compliance program for the cloud?

• A.That cloud providers should not be part of the compliance program
• B.The fairly static nature of the service portfolio and architecture of the cloud
• C.The rapidly changing service portfolio and architecture of the cloud
• D.The similarity of the cloud to the on-premise environment in terms of compliance

Which of the following standards is designed to be used by organizations for cloud services that intend to select controls within the process of implementing an information security management system based on ISO/IEC 27001?

• A.ISO/IEC 27017:2015
• B.ISO/IEC 27002
• C.Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM)
• D.NIST SP 800-146