nerdexam
CompTIA

CAS-002 · Question #299

For companies seeking to move to cloud services, variances in regulation between jurisdictions can be addressed in which of the following ways?

The correct answer is D. Tagging VMs to ensure they are only run in certain geographic regions. Data residency and sovereignty regulations vary by jurisdiction, and tagging VMs to restrict execution to specific geographic regions enforces compliance by ensuring data stays within legally permissible boundaries.

Integration of Computing, Communications and Business Disciplines

Question

For companies seeking to move to cloud services, variances in regulation between jurisdictions can be addressed in which of the following ways?

Options

  • AEnsuring the cloud service provides high availability spanning multiple regions.
  • BUsing an international private cloud model as opposed to public IaaS.
  • CEncrypting all data moved to or processed in a cloud-based service.
  • DTagging VMs to ensure they are only run in certain geographic regions.

How the community answered

(51 responses)
  • A
    8% (4)
  • B
    14% (7)
  • C
    4% (2)
  • D
    75% (38)

Why each option

Data residency and sovereignty regulations vary by jurisdiction, and tagging VMs to restrict execution to specific geographic regions enforces compliance by ensuring data stays within legally permissible boundaries.

AEnsuring the cloud service provides high availability spanning multiple regions.

High availability spanning multiple regions could worsen compliance by spreading data processing across additional jurisdictions with different or conflicting regulatory requirements.

BUsing an international private cloud model as opposed to public IaaS.

An international private cloud does not inherently solve regulatory variance problems because the physical location of the data centers and applicable local laws still determine compliance obligations.

CEncrypting all data moved to or processed in a cloud-based service.

Encrypting data protects its confidentiality in transit and at rest but does not address where data is stored or processed, which is the core requirement of most data sovereignty regulations.

DTagging VMs to ensure they are only run in certain geographic regions.Correct

Many jurisdictions have data sovereignty and residency laws that require certain data to be processed or stored within their borders. By tagging virtual machines with geographic constraints, organizations can enforce cloud governance policies that prevent workloads from running in non-compliant regions, directly addressing regulatory variance across jurisdictions.

Concept tested: Cloud data residency and jurisdictional compliance enforcement

Source: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/regulatory-compliance

Topics

#data sovereignty#cloud compliance#geographic restrictions#VM tagging

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice