Certificate of Cloud Auditing Knowledge: CCAK

Which of the following contract terms is necessary to meet a company's requirement that needs to move data from one CSP to another?

A. Drag and Drop

B. Lift and shift

C. Flexibility to move

D. Transition and data portability

What data center and physical security measures should a cloud customer consider when assessing a cloud service provider?

A. Assess use of monitoring systems to control ingress and egress points of entry to the data center.

B. Implement physical security perimeters to safeguard personnel, data and information systems.

C. Conduct a due diligence to verify the cloud provider applies adequate physical security measures.

D. Review internal policies and procedures for relocation of hardware and software to an offsite location.

The Cloud Computing Compliance Controls Catalogue (C5) framework is maintained by which of the following agencies?

A. Agence nationale de la sécurité des systèmes d’information (ANSSI)

B. National Institute of Standards and Technology (NIST)

C. National Security Agency (NSA)

D. Bundesamt für Sicherheit in der Informationstechnik (BSI)