Certified Cloud Security Professional (CCSP) — Question 297

Which data point that auditors always desire is very difficult to provide within a cloud environment?

Answer options

• A. Access policy
• B. Systems architecture
• C. Baselines
• D. Privacy statement

Correct answer: B

Explanation

The correct answer is B, as the systems architecture in a cloud environment can be complex and abstracted, making it hard for auditors to access detailed information. Options A, C, and D are generally more straightforward to obtain, as they often consist of documented policies or statements that can be provided by cloud service providers.