nerdexam
Isaca

CCAK · Question #31

With regard to the Cloud Control Matrix (CCM), the `Architectural Relevance' is a feature that enables the filtering of security controls by:

The correct answer is D. relevant architectural components such as Physical, Network, Compute, Storage, Application, and. The CSA Cloud Control Matrix (CCM) includes an 'Architectural Relevance' feature that allows users to filter controls based on the specific architectural layer they apply to - such as Physical, Network, Compute, Storage, Application, and Data layers. This is distinct from…

Cloud Auditing Basics and Tools

Question

With regard to the Cloud Control Matrix (CCM), the `Architectural Relevance' is a feature that enables the filtering of security controls by:

Options

  • Arelevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal
  • Brelevant delivery models such as Software as a Service, Platform as a Service, Infrastructure as a
  • Crelevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClient-
  • Drelevant architectural components such as Physical, Network, Compute, Storage, Application, and

How the community answered

(56 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    7% (4)
  • D
    89% (50)

Explanation

The CSA Cloud Control Matrix (CCM) includes an 'Architectural Relevance' feature that allows users to filter controls based on the specific architectural layer they apply to - such as Physical, Network, Compute, Storage, Application, and Data layers. This is distinct from filtering by delivery model (SaaS/PaaS/IaaS) or by external frameworks like NIST. The architectural component view is intended to help architects, engineers, and security teams identify which controls are relevant to a particular layer of their cloud stack, enabling more targeted and efficient security planning.

Topics

#Cloud Control Matrix (CCM)#Architectural Relevance#Security Controls#Cloud Architecture Components

Community Discussion

No community discussion yet for this question.

Full CCAK Practice