Certificate of Cloud Auditing Knowledge (CCAK) — Question 7

When reviewing a third-party agreement with a cloud service provider, which of the following should be the GREATEST concern regarding customer data privacy?

Answer options

• A. Data retention, backup, and recovery
• B. Patch management process
• C. Return or destruction of information
• D. Network intrusion detection

Correct answer: C

Explanation

The correct answer is C because ensuring the return or destruction of information is critical for protecting customer data once the service relationship ends. Options A, B, and D, while important, do not directly address the immediate concerns of customer data privacy with respect to its final handling.