CAS-002 · Question #299
For companies seeking to move to cloud services, variances in regulation between jurisdictions can be addressed in which of the following ways?
The correct answer is D. Tagging VMs to ensure they are only run in certain geographic regions. Data residency and sovereignty regulations vary by jurisdiction, and tagging VMs to restrict execution to specific geographic regions enforces compliance by ensuring data stays within legally permissible boundaries.
Question
For companies seeking to move to cloud services, variances in regulation between jurisdictions can be addressed in which of the following ways?
Options
- AEnsuring the cloud service provides high availability spanning multiple regions.
- BUsing an international private cloud model as opposed to public IaaS.
- CEncrypting all data moved to or processed in a cloud-based service.
- DTagging VMs to ensure they are only run in certain geographic regions.
How the community answered
(51 responses)- A8% (4)
- B14% (7)
- C4% (2)
- D75% (38)
Why each option
Data residency and sovereignty regulations vary by jurisdiction, and tagging VMs to restrict execution to specific geographic regions enforces compliance by ensuring data stays within legally permissible boundaries.
High availability spanning multiple regions could worsen compliance by spreading data processing across additional jurisdictions with different or conflicting regulatory requirements.
An international private cloud does not inherently solve regulatory variance problems because the physical location of the data centers and applicable local laws still determine compliance obligations.
Encrypting data protects its confidentiality in transit and at rest but does not address where data is stored or processed, which is the core requirement of most data sovereignty regulations.
Many jurisdictions have data sovereignty and residency laws that require certain data to be processed or stored within their borders. By tagging virtual machines with geographic constraints, organizations can enforce cloud governance policies that prevent workloads from running in non-compliant regions, directly addressing regulatory variance across jurisdictions.
Concept tested: Cloud data residency and jurisdictional compliance enforcement
Source: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/regulatory-compliance
Topics
Community Discussion
No community discussion yet for this question.