Isaca Exam CCAK Topic 4 Question 33 Discussion

Actual exam question for Isaca's CCAK exam

Question #: 33
Topic #: 4

[All CCAK Questions]

An organization employing the Cloud Controls Matrix (CCM) to perform a compliance assessment leverages the Scope Applicability direct mapping to:

Aobtain the ISO/IEC 27001 certification from an accredited certification body (CB) following the ISO/IEC 17021-1 standard.

Bdetermine whether the organization can be considered fully compliant with the mapped standards because of the implementation of every CCM Control Specification.

Cunderstand which controls encompassed by the CCM may already be partially or fully implemented because of the compliance with other standards.

Show Suggested Answer

Suggested Answer: A

by Ty at Aug 10, 2023, 06:42 PM

Limited Time Offer

25%

Off

Get Premium CCAK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nana

27 days ago

This question is a piece of cake! I could answer it with my eyes closed. Well, maybe not, but you get the idea.

upvoted 0 times

Veronika

6 days ago

A) obtain the ISO/IEC 27001 certification from an accredited certification body (CB) following the ISO/IEC 17021-1 standard.

upvoted 0 times

...

Dyan

29 days ago

Option A sounds like the easy way out. I'm not looking to get an ISO/IEC 27001 certification, I want to understand the CCM itself.

upvoted 0 times

...

Marge

1 months ago

I'm pretty sure Option B is the right answer. If you implement every CCM control, you're good to go, right?

upvoted 0 times

Maybelle

2 days ago

But Option C also makes sense. It's important to understand which controls are already implemented due to compliance with other standards.

upvoted 0 times

...

Cherry

15 days ago

I think Option B is correct. If you implement all CCM controls, you should be fully compliant.

upvoted 0 times

...

Linn

2 months ago

Ah, finally a question that doesn't involve cloud security! This is right up my alley.

upvoted 0 times

Natalie

1 months ago

C) understand which controls encompassed by the CCM may already be partially or fully implemented because of the compliance with other standards.

upvoted 0 times

...

Tijuana

2 months ago

A) obtain the ISO/IEC 27001 certification from an accredited certification body (CB) following the ISO/IEC 17021-1 standard.

upvoted 0 times

...

Louann

2 months ago

Option C is the correct answer. The CCM provides a mapping to various standards, which helps organizations understand which controls they may already have implemented.

upvoted 0 times