Certificate of Cloud Auditing Knowledge (CCAK) — Question 123

Who would be BEST suited to mitigate on a daily basis the risk related to development and operations practices in a public cloud?

Answer options

• A. Risk management team
• B. DevOps team
• C. Internal audit team
• D. Cloud infrastructure team

Correct answer: B

Explanation

The DevOps team is best suited for daily risk mitigation because they are directly involved in both development and operations, allowing them to address issues in real-time. The risk management team typically focuses on broader organizational risks rather than day-to-day operations, while the internal audit team assesses compliance and effectiveness post-factum. The cloud infrastructure team manages the cloud resources but may not directly engage with development processes.