Isaca Exam CCAK Topic 1 Question 34 Discussion

Actual exam question for Isaca's CCAK exam

Question #: 34
Topic #: 1

[All CCAK Questions]

To promote the adoption of secure cloud services across the federal government by

ATo providing a standardized approach to security and risk assessment

BTo provide agencies of the federal government a dedicated tool to certify Authority to
Operate (ATO)

CTo enable 3PAOs to perform independent security assessments of cloud service providers

DTo publish a comprehensive and official framework for the secure implementation of
controls for cloud security

Show Suggested Answer

Suggested Answer: B

by Arthur at Sep 03, 2023, 03:35 PM

Limited Time Offer

25%

Off

Get Premium CCAK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rosendo

1 months ago

Why not just have the cloud services providers perform a 'trust me, I'm secure' assessment? That'll save everyone a lot of time and money!

upvoted 0 times

...

Ashlee

1 months ago

Option C is great, but I bet the 3PAOs will charge an arm and a leg for those independent assessments. Cloud providers should just do it themselves!

upvoted 0 times

Louvenia

2 days ago

True, but the cost factor is definitely something to consider when promoting the adoption of secure cloud services.

upvoted 0 times

...

Ronnie

5 days ago

True, it's all about finding the right balance between cost and security.

upvoted 0 times

...

Blondell

6 days ago

But having independent assessments can provide an extra layer of security and assurance.

upvoted 0 times

...

Alaine

7 days ago

But having independent assessments from 3PAOs can provide an extra layer of security and assurance.

upvoted 0 times

...

Vallie

13 days ago

I agree, it would be more cost-effective for cloud providers to do their own assessments.

upvoted 0 times

...

Terrilyn

14 days ago

I agree, it would be more cost-effective for cloud providers to do their own assessments.

upvoted 0 times

...

Tresa

2 months ago

Option B is interesting, but I'm not sure a dedicated ATO tool is the best solution. Wouldn't that just add more bureaucracy?

upvoted 0 times

Nan

16 days ago

C) To enable 3PAOs to perform independent security assessments of cloud service providers

upvoted 0 times

...

Leonor

19 days ago

B) To provide agencies of the federal government a dedicated tool to certify Authority to Operate (ATO)

upvoted 0 times

...

Hermila

20 days ago

A) To providing a standardized approach to security and risk assessment

upvoted 0 times

...

Billye

2 months ago

I'm leaning towards Option D. A definitive framework for cloud security controls would really help agencies implement secure cloud services.

upvoted 0 times

Pansy

11 days ago

True, enabling 3PAOs to perform independent security assessments is crucial for ensuring the security of cloud service providers.

upvoted 0 times

...

Soledad

17 days ago

I think Option B is important too. Having a dedicated tool for certifying Authority to Operate could streamline the process.

upvoted 0 times

...

Vilma

1 months ago

I agree, having a standardized approach to security and risk assessment would be very beneficial.

upvoted 0 times

...

Alberta

1 months ago

Option D sounds like a great choice. Having a comprehensive framework would definitely make things easier for agencies.

upvoted 0 times

...

Mike

2 months ago

Option A seems like the most comprehensive approach to me. Standardizing security assessments across the government is key to promoting secure cloud adoption.

upvoted 0 times

Tegan

1 months ago

User 2: Definitely, it will provide a clear framework for everyone to follow.

upvoted 0 times

...

Marguerita

2 months ago

User 1: I agree, having a standardized approach will make it easier for agencies to assess security risks.

upvoted 0 times

...

Jess

2 months ago

I believe option D is also crucial for ensuring secure implementation of controls.

upvoted 0 times

...

Sherita

2 months ago

I agree with Tasia, having a standardized approach is key.

upvoted 0 times

...

Tasia

2 months ago

I think option A is important for promoting secure cloud services.

upvoted 0 times

...