Which two statements about how to provision and manage data originators in a cloud environment are true? (Choose two.)

Question

Options

• AThe provisioning of digital identities is the responsibility of the data originators.
• BCloud providers offer services for automated device provisioning, which allows the lifecycle of the
• CCloud providers offer application programming interfaces, which allow a programmatic
• DThere is no need to provision and manage access for data originators in the cloud.
• EThe access to public clouds must be configured and managed manually.

• A
  7% (1)
• C
  87% (13)
• D
  7% (1)

Explanation

C is correct because cloud providers (AWS, Azure, GCP) expose APIs and SDKs that allow administrators to programmatically provision, update, and revoke access for data originators - enabling automation, scalability, and integration into DevOps pipelines without manual portal interaction.

E is correct because public cloud access doesn't configure itself - administrators must explicitly define identity policies, roles, permissions, and network controls. Even when APIs automate execution, the access rules themselves must be deliberately designed and managed by humans responsible for governance and compliance.

Why the distractors fail:

• A is wrong because data originators (devices, sensors, apps) don't provision their own identities - that responsibility belongs to cloud administrators or IAM systems.
• B sounds plausible and is partially true, but it's a distractor here because automated device lifecycle management is a feature that exists in addition to manual configuration, not a replacement; the truncated statement also makes it incomplete.
• D is obviously wrong - access control for data originators is a core cloud security requirement, never optional.

Memory tip: Think "Cloud = Code" (APIs enable programmatic control) and "Explicit = Essential" (public cloud access never configures itself - someone must explicitly set it up). If a choice says "no need to manage" or "automatic without effort," treat it as a red flag.

No community discussion yet for this question.