Logo ExamsQA
Exit
Official Bank 0/207

Isaca Certificate of Cloud Auditing Knowledge (CCAK) - Isaca Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
207 Total Questions
1
Question
What areas should be reviewed when auditing a public cloud?
Options
A Identity and access management (IAM) and data protection
B Patching and configuration
C Source code reviews and hypervisor
D Vulnerability management and cyber security reviews
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which of the following cloud environments should be a concern to an organization s cloud auditor?
Options
A The cloud service provider s data center is more than 100 miles away.
B The organization entirely depends on several proprietary Software as a Service (SaaS) applications.
C The technical team is trained on only one vendor Infrastructure as a Service (laaS) platform, but the organization has subscribed to another vendor's laaS platform as an alternative.
D The failover region of the cloud service provider is on another continent
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which of the following is an example of financial business impact?
Options
A A distributed denial of service (DDoS) attack renders the customer's cloud inaccessible for 24 hours, resulting in millions in lost sales.
B While the breach was reported in a timely manner to the CEO, the CFO and CISO blamed
each other in public consulting in a loss of public confidence that led the board to replace all three.
C A hacker using a stolen administrator identity brings down the Software of a Service (SaaS) sales and marketing systems, resulting in the inability to process customer orders or manage customer relationships.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following is a good candidate for continuous auditing?
Options
A Cryptography and authentication
B Procedures
C Governance
D Documentation quality
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
An organization that is utilizing a community cloud is contracting an auditor to conduct a review on behalf of the group of organizations within the cloud community. Of the following, to whom should the auditor report the findings?
Options
A Cloud service provider
B Management of the organization being audited
C Shareholders and interested parties
D Public
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.