CompTIA CASP+ (CAS-003) — Question 303

An organization is in the process of evaluating service providers for an upcoming migration to cloud-based services for the organization's ERP system. As part of the requirements defined by the project team, regulatory requirements specify segmentation and isolation of the organization's data. Which of the following should the vendor management team identify as a requirement during the procurement process?

Answer options

• A. Public cloud services with single-tenancy IaaS architectures
• B. Private cloud services with single-tenancy PaaS services
• C. Private cloud services with multitenancy in place for private SaaS environments
• D. Public cloud services with private SaaS environments supported by private IaaS backbones

Correct answer: B

Explanation

The correct answer is B, as private cloud services with single-tenancy PaaS solutions offer the necessary isolation and segmentation required by the organization's regulatory needs. Options A and D involve public cloud environments, which do not guarantee the necessary isolation, while option C utilizes multitenancy, which may not fulfill the strict requirements for data segregation.