Certified Information Privacy Professional – Europe (CIPP/E) — Question 183

Which of the following is NOT recognized as being a common characteristic of cloud-computing services?

Answer options

• A. The service’s infrastructure is shared among the supplier’s customers and can be located in a number of countries.
• B. The supplier determines the location, security measures, and service standards applicable to the processing.
• C. The supplier allows customer data to be transferred around the infrastructure according to capacity.
• D. The supplier assumes the vendor’s business risk associated with data processed by the supplier.

Correct answer: D

Explanation

Option D is correct because in cloud computing, the supplier does not typically assume the business risk of the customer's data; that responsibility usually remains with the customer. Options A, B, and C are all recognized characteristics of cloud services, highlighting shared infrastructure, supplier control over security and standards, and flexible data management capabilities.