Certificate of Cloud Auditing Knowledge (CCAK) — Question 58

What documents should be provided by the infrastructure and platform operations team to the auditors in relation to auditing cloud data protection and life cycle management?

Answer options

• A. Backup and recovery policy, including evidence of the last review and update timeline and latest best results
• B. Policies and procedures established around third-party risk assessments
• C. Inventory of third-party attestation reports
• D. Enterprise-cloud strategy and policy

Correct answer: A

Explanation

The correct answer is A because it directly relates to cloud data protection and lifecycle management, providing critical insights into the status and effectiveness of backup and recovery processes. Options B, C, and D, while important, do not specifically address the requirements for auditing cloud data protection and lifecycle management.