Certificate of Cloud Auditing Knowledge (CCAK) — Question 245

When an organization is using cloud services, the security responsibilities largely vary depending on the service delivery model used, while the accountability for compliance should remain with the:

Answer options

• A. cloud user.
• B. cloud service provider.
• C. certification authority (CA).
• D. cloud customer.

Correct answer: D

Explanation

The correct answer is D, as the cloud customer retains accountability for compliance regardless of the service model. Options A and B are incorrect because while users and providers have specific security roles, they do not hold ultimate compliance responsibility. Option C, the certification authority, is not directly responsible for compliance in the context of cloud service usage.