Certificate of Cloud Auditing Knowledge (CCAK) — Question 262

While using public cloud services, cloud users may cede direct control over:

Answer options

• A. anti-malware solutions.
• B. encryption keys.
• C. security patching.
• D. penetration testing.

Correct answer: C

Explanation

The correct answer is C because in a public cloud environment, the cloud provider typically manages security patching to ensure that the infrastructure remains secure and up to date. Options A and B involve user-controlled aspects, such as anti-malware and encryption keys, while D, penetration testing, can often be managed by the user as well.