nerdexam
CSA

CCSK · Question #125

Which of the following items is one of the major regulatory compliance problems associated with cloud environments?

The correct answer is D. The distributed nature of cloud storage may result in regulated information being sent across. A major regulatory compliance problem in cloud environments is that data is automatically distributed across multiple geographic locations, which can move regulated data into jurisdictions where its storage or transfer is legally restricted.

Legal, Risk, and Compliance

Question

Which of the following items is one of the major regulatory compliance problems associated with cloud environments?

Options

  • AThe lowered cost of cloud services may violate computer service embargoes
  • BThe advent of applications as a service may violate software licensing agreements
  • CTransparency is improved through consolidated and centralized management platforms
  • DThe distributed nature of cloud storage may result in regulated information being sent across
  • EThe multi-tenancy model allows cloud customers to unfairly share hard drives that would otherwise

How the community answered

(39 responses)
  • A
    15% (6)
  • B
    5% (2)
  • D
    77% (30)
  • E
    3% (1)

Why each option

A major regulatory compliance problem in cloud environments is that data is automatically distributed across multiple geographic locations, which can move regulated data into jurisdictions where its storage or transfer is legally restricted.

AThe lowered cost of cloud services may violate computer service embargoes

The cost of cloud services has no recognized connection to computer service embargoes; this is not an established regulatory compliance concern in cloud computing.

BThe advent of applications as a service may violate software licensing agreements

Delivering applications as a service does not inherently violate software licensing agreements because cloud service models have their own distinct and legally recognized licensing structures.

CTransparency is improved through consolidated and centralized management platforms

Improved transparency through centralized management is a security and operational benefit of cloud environments, not a compliance problem.

DThe distributed nature of cloud storage may result in regulated information being sent acrossCorrect

Cloud providers replicate and distribute data across data centers in multiple regions or countries to ensure availability and redundancy, often without the customer explicitly controlling where each copy resides. Regulations such as GDPR, HIPAA, and various national data sovereignty laws impose strict requirements on where certain categories of regulated data may be stored or transferred. The inherently distributed nature of cloud storage can cause unintentional cross-border data transfers that violate these geographic restrictions, creating direct regulatory liability.

EThe multi-tenancy model allows cloud customers to unfairly share hard drives that would otherwise

Multi-tenancy involves logical isolation of customer data through software controls, not physical sharing of hard drives, making this statement a technical misrepresentation of how cloud multi-tenancy operates.

Concept tested: Cloud data sovereignty and cross-border regulatory compliance

Source: https://cloudsecurityalliance.org/research/guidance

Topics

#data residency#regulatory compliance#distributed storage#cloud compliance

Community Discussion

No community discussion yet for this question.

Full CCSK Practice