Certificate of Cloud Auditing Knowledge (CCAK) — Question 198

A CSP providing cloud services currently being used by the United States federal government should obtain which of the following to assure compliance to stringent government standards?

Answer options

• A. Multi-Tier Cloud Security (MTCS) Attestation
• B. FedRAMP Authorization
• C. ISO/IEC 27001:2013 Certification
• D. CSA STAR Level Certificate

Correct answer: B

Explanation

The correct answer is FedRAMP Authorization, which is specifically designed for cloud services used by U.S. federal agencies to meet security standards. The other options, while important in their own right, do not specifically address the requirements set forth by the federal government for cloud service compliance.