Certificate of Cloud Auditing Knowledge (CCAK) — Question 125

What is below the waterline in the context of cloud operationalization?

Answer options

• A. The controls operated by the cloud access security broker (CASB)
• B. The controls operated by both
• C. The controls operated by the customer
• D. The controls operated by the cloud service provider

Correct answer: D

Explanation

The correct answer is D, as it refers to the security and operational controls that the cloud service provider is responsible for, which are not visible to the customer. Options A and C focus on controls managed by other entities, while B suggests a shared responsibility that does not specifically address the question about what lies below the waterline.