Certificate of Cloud Security Knowledge (CCSK) — Question 151

In which deployment model should the governance strategy consider the minimum common set of controls comprised of the Cloud Service Provider contract and the organization's internal governance agreements?

Answer options

• A. Public
• B. PaaS
• C. Private
• D. IaaS
• E. Hybrid

Correct answer: E

Explanation

The correct answer is E, Hybrid, because this model combines both public and private cloud environments, necessitating a governance strategy that integrates controls from both the Cloud Service Provider and the organization's internal policies. The other options, such as Public, PaaS, Private, and IaaS, do not require such a comprehensive governance approach as they are typically limited to their own specific environments.