CCAK Question 82

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  D. Security assessment Security assessments range from reviewing papers to actual hands-on red teaming penetration testing on the overhaul platform. In general, the goals of each assessment process are to understand the relevant controls; to check that customer-side controls are in place and operating correctly; and to verify that the customer is asking the cloud provider the right questions about responsibilities under the shared responsibility model. see study guide page 37 Contractual agreement define responsibilities but do not verify CSP claims. External audits provide assurance but are not the tool used by customers to verify CSP shared-responsibility claims.

• Chose C1

  To support a customer's verification of the Cloud Service Provider's (CSP) claims regarding their responsibilities according to the shared responsibility model, the most appropriate tool or technique would be: C. External audit External audits are conducted by independent third parties and can provide an objective assessment of whether the CSP is meeting its responsibilities as outlined in the shared responsibility model. These audits can help verify claims made by the CSP and ensure compliance with standards and regulations.

• 4

  The Answer is D. The goals of each assessment process are to understand the relevant controls, to check that customer-side controls are in place and operating correctly; and to verify that the customer is asking the cloud provider the right questions about responsibilities under the shared responsibility model.