Exam CCSK All QuestionsBrowse all questions from this exam
Question 46

What is true of companies considering a cloud computing business relationship?

    Correct Answer: C

    Companies using cloud providers are typically considered the custodians of the data entrusted to them. This means they are responsible for ensuring the security and compliance of the data according to relevant laws and regulations. Cloud providers, while responsible for certain aspects of security and compliance, do not absolve the companies from their data protection responsibilities. Therefore, the data stewardship primarily lies with the companies using the cloud services.

Discussion
saptatiOption: C

According to , "Before getting into legal details it is worth noting that the customers of cloud providers may vary in type (from private to public entities) and size (from SMEs to large companies) and, thus, in the extent to which they are in a position to negotiate. This is very relevant from the legal point of view, because the relationship between the cloud providers and their customers will be mostly regulated by means of contracts", (Ref: ENISA, Page 97). Therefore, companies considering a cloud computing business relationship should pay close attention to the contracts and agreements they enter into with cloud providers, as these will determine the rights and responsibilities of both parties. The text does not support options A, B, D, or E. Option C is partially true, as the companies using cloud providers are responsible for ensuring the security of the data entrusted to them, but they may also have legal protections and obligations related to data protection. Thus, I will go with answer C.