Isaca CCAK Exam - Topic 2 Question 39 Discussion

Actual exam question for Isaca's CCAK exam

Question #: 39
Topic #: 2

[All CCAK Questions]

When performing audits in relation to business continuity management and operational resilience strategy, what would be the MOST critical aspect to audit in relation to the strategy of the cloud customer that should be formulated jointly with the cloud service provider?

AValidate whether the strategy covers all aspects of business continuity and resilience planning, taking inputs from the assessed impact and risks, to consider activities for before, during, and after a disruption.

BValidate whether the strategy is developed by both cloud service providers and cloud service consumers within the acceptable limits of their risk appetite.

CValidate whether the strategy covers all activities required to continue and recover prioritized activities within identified time frames and agreed capacity, aligned to the risk appetite of the organization including the invocation of continuity plans and crisis management capabilities.

Show Suggested Answer

Suggested Answer: A

by Lindsey at Feb 08, 2024, 11:43 PM

Limited Time Offer

25%

Off

Get Premium CCAK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cathrine

3 months ago

Not sure if B is enough, feels like it’s missing some key elements.

upvoted 0 times

...

Willie

3 months ago

C covers the most ground, can’t overlook those time frames!

upvoted 0 times

...

Carisa

3 months ago

Surprised that A isn’t getting more love, it seems fundamental.

upvoted 0 times

...

Fabiola

4 months ago

I think B is crucial too, risk appetite matters!

upvoted 0 times

...

Gladys

4 months ago

Definitely option C, it’s all about prioritizing recovery!

upvoted 0 times

...

Lashanda

4 months ago

I recall a similar question where we focused on the collaboration between the provider and consumer. That makes me lean towards option B.

upvoted 0 times

...

Madalyn

4 months ago

I’m a bit uncertain about whether the strategy needs to cover all aspects or just the prioritized activities. It feels like both are important.

upvoted 0 times

...

Tiera

4 months ago

I think option C sounds familiar; it emphasizes recovery activities and time frames, which we practiced in our case studies.

upvoted 0 times

...

Lashandra

5 months ago

I remember discussing the importance of aligning the strategy with risk appetite, but I'm not sure if that's the most critical aspect to audit.

upvoted 0 times

...

Beckie

5 months ago

I'm a bit confused by this question. There are a lot of details to consider, like the roles of the cloud provider and customer, the different phases of business continuity, and the risk appetite. I'll have to really think through each option carefully to determine the most critical aspect.

upvoted 0 times

...

Serina

5 months ago

Okay, I've got this. The answer is clearly C - it covers all the critical elements of a robust business continuity strategy, including prioritized activities, recovery time frames, and alignment with the organization's risk appetite. That's the most complete and important aspect to audit.

upvoted 0 times

...

Margot

5 months ago

Hmm, this is a tricky one. I'm not entirely sure what the "most critical aspect" they're looking for is. I'll have to carefully read through the options and think about which one is the most comprehensive.

upvoted 0 times

...

Myrtie

5 months ago

This question seems to be testing our understanding of business continuity and resilience planning in the context of cloud services. I think the key is to focus on the joint strategy between the cloud customer and provider.

upvoted 0 times

...

Caitlin

5 months ago

Risk is an interesting option, but I'm not sure if that's considered a filter column for the Application Filter. I'll have to think carefully about which three make the most sense based on my knowledge of this feature.

upvoted 0 times

...

Veronika

5 months ago

This looks like a pretty straightforward network security question. I think I can handle this one.

upvoted 0 times

...

Trinidad

5 months ago

Hmm, I'm a bit unsure about this one. The question mentions a "missing 'body' section", but I'm not sure what that refers to. I'll need to analyze the code snippets more closely to figure out the right approach.

upvoted 0 times

...

Clay

5 months ago

Water transportation doesn't seem right for detention charges… but then again, could it be related to the port delays?

upvoted 0 times

...

Carey

2 years ago

Agreed. It's important to ensure the strategy includes the invocation of continuity plans and crisis management capabilities.

upvoted 0 times

...

Elena

2 years ago

I think overall, we should validate if the strategy covers all activities required to continue and recover prioritized activities within identified time frames and agreed capacity.

upvoted 0 times

...

Timothy

2 years ago

That's a good point, Carey. It's crucial that the strategy align with the risk appetite of the organization.

upvoted 0 times

...

Carey

2 years ago

But shouldn't we also validate if the strategy is developed by both providers and consumers within acceptable limits of their risk appetite?

upvoted 0 times

...

Elena

2 years ago

I agree with Timothy. It's important to consider activities for before, during, and after a disruption.

upvoted 0 times

...

Timothy

2 years ago

I think the most critical aspect to audit is whether the strategy covers all aspects of business continuity and resilience planning.

upvoted 0 times

...