Certificate of Cloud Auditing Knowledge (CCAK) — Question 60

The cloud risk management process should:

Answer options

• A. evaluate only the cloud providers’ general maturity.
• B. verify the provider’s policy aligns with the customer’s policy.
• C. evaluate the specific cloud service features.
• D. evaluate the services of the same security features.

Correct answer: C

Explanation

The correct answer is C because evaluating the specific cloud service features is crucial for identifying potential risks associated with those features. Options A and B focus on general aspects of cloud providers and alignment of policies, which are important but do not directly address risk management. Option D is also incorrect as it limits the evaluation to services with the same security features, which may not provide a comprehensive risk assessment.