Certified Cloud Security Professional (CCSP) — Question 374

As part of the auditing process, getting a report on the deviations between intended configurations and actual policy is often crucial for an organization.
What term pertains to the process of generating such a report?

Answer options

• A. Deficiencies
• B. Findings
• C. Gap analysis
• D. Errors

Correct answer: C

Explanation

The correct answer is C, Gap analysis, as it specifically refers to the process of identifying the discrepancies between current and desired states. Options A, B, and D do not accurately describe this process; deficiencies and errors are more about problems found, while findings are general reports that may not focus on configuration gaps.