The BEST way to deliver continuous compliance in a cloud environment is to:

• A.combine point-in-time assurance approaches with continuous auditing.
• B.increase the frequency of external audits from annual to quarterly.
• C.decrease the interval between attestations of compliance.
• D.combine point-in-time assurance approaches with continuous monitoring.

Comment: *

Name: *

Email: *

Verification: *

When a client's business process changes, the CSP SLA should:

• A.not be reviewed as the SLA cannot be updated.
• B.not be reviewed, but the cloud contract should be cancelled immediately.
• C.be reviewed, but the SLA cannot be updated.
• D.be reviewed and updated if required.

Comment: *

Name: *

Email: *

Verification: *

Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?

• A.Organized Downtime
• B.Expected Engineering
• C.PlannedOutages
• D.Resiliency Planning
• E.Chaos Engineering

Comment: *

Name: *

Email: *

Verification: *

CCM: In the CCM tool, ais a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

• A.Risk Impact
• B.Control Specification
• C.Domain

Comment: *

Name: *

Email: *

Verification: *

If the degree of verification for information shared with the auditor during an audit is low, the auditor should:

• A.stop evaluating the requirement altogether and review other audit areas.
• B.use professional judgment to determine the degree of reliance that can be placed on the information as evidence.
• C.reject the information as audit evidence.
• D.delve deeper to obtain the required information to decide conclusively.

Comment: *

Name: *

Email: *

Verification: *