Certificate of Cloud Security Knowledge (CCSK) — Question 47

Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

Answer options

• A. More physical control over assets and processes.
• B. Greater reliance on contracts, audits, and assessments due to lack of visibility or management.
• C. Decreased requirement for proactive management of relationship and adherence to contracts.
• D. Increased need, but reduction in costs, for managing risks accepted by the cloud provider.
• E. None of the above.

Correct answer: B

Explanation

Option B is correct because it highlights the increased dependence on formal agreements and evaluations in cloud setups where visibility into processes may be limited. The other options either inaccurately represent cloud risk management dynamics or suggest a false sense of control and reduced costs that do not align with the realities of cloud deployments.