exam questions

Exam CCAK All Questions

View all questions & answers for the CCAK exam

Exam CCAK topic 1 question 239 discussion

Actual exam question from Isaca's CCAK
Question #: 239
Topic #: 1
[All CCAK Questions]

Which of the following provides the BEST evidence that a cloud service provider's continuous integration and continuous delivery (CI/CD) development pipeline includes checks for compliance as new features are added to its Software as a Service (SaaS) applications?

  • A. Compliance tests are automated and integrated within the CI tool.
  • B. Developers keep credentials outside the code base and in a secure repository.
  • C. Frequent compliance checks are performed for development environments.
  • D. Third-party security libraries are continuously kept up to date.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Auditor2020
5 days, 22 hours ago
Selected Answer: A
A. Compliance tests are automated and integrated within the CI tool. Automating compliance tests and integrating them within the CI tool provides the best evidence that compliance checks are consistently and systematically applied as new features are added. This approach ensures that compliance requirements are automatically verified during the development process, reducing the risk of human error and ensuring that any non-compliance issues are identified and addressed promptly. Automated compliance checks can be executed as part of the CI/CD pipeline, providing ongoing assurance that the SaaS applications meet the necessary compliance standards.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago