nerdexam
Isaca

CCAK · Question #80

Which of the following is the BEST way for a client to enforce a policy violation committed by a cloud service provider (CSP)?

The correct answer is A. The violation is agreed upon and documented. The most effective enforcement mechanism is having violations formally agreed upon and documented in contractual instruments such as Service Level Agreements (SLAs), Master Service Agreements (MSAs), or Data Processing Agreements (DPAs). Written documentation creates a legally…

Cloud Governance

Question

Which of the following is the BEST way for a client to enforce a policy violation committed by a cloud service provider (CSP)?

Options

  • AThe violation is agreed upon and documented.
  • BNothing can be done to enforce violations as this is a cloud service.
  • CThe violation is agreed to verbally by the CSP.
  • DViolations will be automatically enforced so no action is needed.

How the community answered

(53 responses)
  • A
    91% (48)
  • B
    2% (1)
  • C
    2% (1)
  • D
    6% (3)

Explanation

The most effective enforcement mechanism is having violations formally agreed upon and documented in contractual instruments such as Service Level Agreements (SLAs), Master Service Agreements (MSAs), or Data Processing Agreements (DPAs). Written documentation creates a legally binding basis for remedies including financial penalties, service credits, or contract termination. Verbal agreements (C) are not reliably enforceable. Assuming enforcement is automatic (D) is incorrect - enforcement requires deliberate contractual action. Assuming nothing can be done (B) is also wrong - the contract is precisely the tool designed to address violations.

Topics

#Policy enforcement#Cloud governance#Contractual agreements#Documentation best practices

Community Discussion

No community discussion yet for this question.

Full CCAK Practice