exam questions

Exam CCAK All Questions

View all questions & answers for the CCAK exam

Exam CCAK topic 1 question 6 discussion

Actual exam question from Isaca's CCAK
Question #: 6
Topic #: 1
[All CCAK Questions]

Network environments and virtual instances shall be designed and configured to restrict and monitor traffic between trusted and untrusted connections. These configurations shall be reviewed at least annually, and supported by a documented justification for use for all allowed services, protocols, ports, and by compensating controls. Which of the following controls BEST matches this control description?

  • A. Network Security
  • B. Change Detection
  • C. Virtual Instance and OS Hardening
  • D. Network Vulnerability Management
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
lorelai007007
1 month ago
Selected Answer: A
Answer found in CCAK study guide
upvoted 1 times
...
sai_murthy
6 months, 3 weeks ago
CSA Cloud Auditing Guidelines PDF-v4 : Network Security IVS-03. Answer is A
upvoted 2 times
...
paulnghw
8 months, 2 weeks ago
Selected Answer: A
It is network level monitoring.
upvoted 1 times
...
a5g
1 year, 4 months ago
Selected Answer: A
IVS-06: Network Security
upvoted 1 times
...
ME79
1 year, 5 months ago
Selected Answer: C
pp. 197-198, Section 3.4.11, Infrastructure and Virtualization, CCAK Study Guide - "Following are examples of measures an organization should have in place to mitigate the risk related to infrastructure and virtualization management. ... • Continuously monitor security audit logs to detect anomalies, and take appropriate action. • Monitor, encrypt and restrict communications between environments to authenticated and authorized connections. • Document allowed services, protocols and ports. • Harden the host and guest OS, hypervisor or infrastructure control plane."
upvoted 1 times
ME79
1 year, 5 months ago
Apologies. It is actually Answer A. According to the older CCM 3.01 this is actually word-for-word from the Infrastructure & Virtualization Security control number IVS-06: Network Security.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago