Certificate of Cloud Auditing Knowledge (CCAK) — Question 268

In which of the following risk scenarios should a cloud customer have the full responsibility in all cloud service models?

Answer options

• A. Infrastructure risk
• B. Identity and access risk
• C. Endpoint risk
• D. Data classification risk

Correct answer: D

Explanation

The correct answer is D, Data classification risk, because the cloud customer is responsible for understanding and classifying their data, regardless of the service model in use. Other options like infrastructure, identity, and endpoint risks often involve shared responsibilities with the cloud provider, where the provider manages certain aspects of security and risk.