CCAK Question 62

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  A certification target helps in the formation of a continuous certification framework by incorporating: D. scope description and security attributes to be tested. In the context of establishing a continuous certification framework, defining the scope and identifying the specific security attributes that need to be evaluated are fundamental steps. This ensures that the certification process is comprehensive and relevant to the specific requirements and risks associated with the service or system being certified. While CSA STAR level 2 attestation, service level objectives, and frequency of evaluation are all important aspects of a security and compliance strategy, the scope description and security attributes form the foundation for a targeted and effective certification process.

• 1

  Answer is D. CCAK Study Guide Continuous auditing used to build a continuous certification framework includes the concept of a certification target, a statement comprised of the following: 1) A description of the scope of the information under scrutiny 2) A list of security attributes being evaluated, each with: a) A corresponding SLO or SQO b) A frequency of evaluation

• Chose D1

  CCAK Study Guide Pg 384:Continuous auditing used to build a continuous certification framework includes the concept of a certification target, a statement comprised of the following:  A description of the scope of the information under scrutiny  A list of security attributes being evaluated, each with:  A corresponding SLO or SQO  A frequency of evaluation