Certified Cloud Security Professional (CCSP) — Question 466

Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?

Answer options

• A. Redundant uplink grafts
• B. Background checks for the provider's personnel
• C. The physical layout of the datacenter
• D. Use of subcontractors

Correct answer: D

Explanation

The correct answer, D, is crucial as subcontractors may pose additional risks and should be carefully evaluated. While options A, B, and C are important aspects of a provider's operations, they do not directly address the contractual relationship and the management of third-party risks that subcontractors represent.