Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Certificate of Cloud Auditing Knowledge (CCAK) · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The best method to report continuous assessment of a cloud provider’s services to the Cloud Security Alliance (CSA) is typically through: A. a set of dedicated application programming interfaces (APIs). Using dedicated APIs allows for automated, real-time reporting and monitoring of the cloud provider's services, which can be more efficient and provide continuous insights compared to periodic assessments like SOC 2 Type 2 attestation or CCM assessments. APIs can facilitate ongoing data exchange and integration, providing timely and accurate information about the cloud services.
Agree option A.
p. 385, CCAK Study Guide - (Note: this question asks about reporting to the CSA) "Once the Initialization phase is completed, the continuous audit phase starts, running for up to a full year. The continuous audit phase includes: • The third-party auditor periodically periodically preforms checks to confirm that the assessment tools are trustworthy (e.g., integrity checks). • The assessment tools continuously report the results of the assessment of each defined security objective to CSA through a dedicated API, according to the frequency defined in policies within the continuous certification target:"