Certified Cloud Security Professional (CCSP) — Question 464

What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?

Answer options

• A. A set of software development life cycle requirements for cloud service providers
• B. An inventory of cloud services security controls that are arranged into a hierarchy of security domains
• C. An inventory of cloud service security controls that are arranged into separate security domains
• D. A set of regulatory requirements for cloud service providers

Correct answer: C

Explanation

The Cloud Security Alliance Cloud Controls Matrix (CCM) is specifically an inventory that categorizes cloud service security controls into separate security domains, making option C the correct answer. Options A, B, and D misrepresent the purpose and structure of the CCM, as they either describe software development requirements or regulatory standards, which are not accurate for the CCM.