Certificate of Cloud Auditing Knowledge (CCAK) — Question 197

A cloud customer configured and developed a solution on top of the certified cloud services. Building on top of a compliant CSP:

Answer options

• A. means that the cloud customer is also compliant.
• B. means that the cloud customer and client are both compliant.
• C. means that the cloud customer is compliant but their client is not compliant.
• D. does not necessarily mean that the cloud customer is also compliant.

Correct answer: D

Explanation

The correct answer is D because just because a compliant cloud service provider (CSP) is used does not guarantee that the cloud customer adheres to the same compliance standards. Options A, B, and C incorrectly assume that compliance is universally transferred from the CSP to the cloud customer or their client.