Certificate of Cloud Security Knowledge (CCSK) — Question 60

Which tool is the primary tool between the cloud provider and consumer that extends governance into business partners and providers?

Answer options

• A. Compliance Reporting
• B. Supplier Assessments
• C. Consumer Assessments
• D. Contracts
• E. Service-level Agreements (SLAs)

Correct answer: D

Explanation

The correct answer is D, Contracts, as they are essential for establishing the terms of engagement and governance between the cloud provider and consumer, including third parties. Options A, B, C, and E are important components of governance but do not serve as the primary tool for extending governance in the same way that contracts do.