Certificate of Cloud Security Knowledge (CCSK) — Question 147

What is true of companies considering a cloud computing business relationship?

Answer options

• A. The laws protecting customer data are based on the cloud provider and customer location only.
• B. The confidentiality agreements between companies using cloud computing services is limited legally to the company, not the provider.
• C. The companies using the cloud providers are the custodians of the data entrusted to them.
• D. The cloud computing companies are absolved of all data security and associated risks through contracts and data laws.
• E. The cloud computing companies own all customer data.

Correct answer: C

Explanation

The correct answer is C because companies that utilize cloud services are responsible for the data they manage, ensuring its protection and compliance. Options A and B incorrectly suggest limitations on data protection laws and confidentiality that do not reflect the broader legal responsibilities. Options D and E misrepresent the liability and ownership of data in cloud relationships, as cloud providers cannot be absolved of all risks and do not inherently own customer data.