Certificate of Cloud Auditing Knowledge (CCAK) — Question 94

When developing a cloud compliance program, what is the PRIMARY reason for a cloud customer to review which cloud services will be deployed?

Answer options

• A. To determine how those services will fit within its policies and procedures
• B. To determine the total cost of the cloud services to be deployed
• C. To confirm which vendor will be selected based on the compliance with security requirements
• D. To confirm if the compensating controls implemented are sufficient for the cloud

Correct answer: A

Explanation

The correct answer is A, as understanding how the services align with internal policies and procedures is crucial for compliance. Option B focuses on cost, which, while important, is not the primary concern for compliance. Option C is about vendor selection rather than service deployment, and option D addresses compensating controls, which is a secondary consideration after service alignment with policies.