nerdexam
CSA

CCSK · Question #49

In which type of environment is it impractical to allow the customer to conduct their own audit, making it important that the data center operators are required to provide auditing for the customers?

The correct answer is C. Multi-tenant environments. Customers should understand that providers can (and often should) consider on-premises audits a security risk when providing multitenant services. Multiple on-premises audits from large numbers of customers present clear logistical and security challenges, especially when the…

Auditing

Question

In which type of environment is it impractical to allow the customer to conduct their own audit, making it important that the data center operators are required to provide auditing for the customers?

Options

  • AMulti-application, single tenant environments
  • BLong distance relationships
  • CMulti-tenant environments
  • DDistributed computing arrangements
  • ESingle tenant environments

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    17% (4)
  • C
    75% (18)
  • D
    4% (1)

Explanation

Customers should understand that providers can (and often should) consider on-premises audits a security risk when providing multitenant services. Multiple on-premises audits from large numbers of customers present clear logistical and security challenges, especially when the provider relies on shared assets to create the resource pools.

Topics

#multi-tenant auditing#third-party audit#cloud compliance#audit access

Community Discussion

No community discussion yet for this question.

Full CCSK Practice