Certified in Risk and Information Systems Control (CRISC) — Question 1213

A large organization plans to take advantage of cloud computing to reduce costs; however, there are data-use restrictions that require certain data to remain on premise. Which cloud model should the risk practitioner recommend for this deployment?

Answer options

• A. Community cloud
• B. Private cloud
• C. Hybrid cloud
• D. Public cloud

Correct answer: C

Explanation

The correct answer is Hybrid cloud because it allows for a combination of on-premise and cloud resources, making it suitable for organizations that need to keep some data locally while leveraging the cloud for other applications. Community cloud and Private cloud do not address the need for both on-premise and cloud solutions, and Public cloud does not comply with the requirement to keep certain data on-site.