Certificate of Cloud Security Knowledge (CCSK) — Question 49

CCM: In the CCM tool, a _____________________ is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

Answer options

• A. Risk Impact
• B. Domain
• C. Control Specification

Correct answer: C

Explanation

The correct answer is 'Control Specification' as it accurately defines a measure that modifies risk in the context of the CCM tool. 'Risk Impact' refers to the potential effects of a risk event, while 'Domain' typically pertains to a specific area of focus within risk management, neither of which directly modifies risk.