nerdexam
(ISC)2

CCSP · Question #105

The Cloud Security Alliance's (CSA's) Cloud Controls Matrix (CCM) addresses all the following security architecture elements except ____________.

The correct answer is D. Business drivers. The Cloud Security Alliance's (CSA) Cloud Controls Matrix (CCM) focuses on security controls and architecture elements across various cloud service models, but it does not directly address business drivers as a security architecture element.

Submitted by rachelw· Apr 18, 2026Legal, Risk and Compliance

Question

The Cloud Security Alliance's (CSA's) Cloud Controls Matrix (CCM) addresses all the following security architecture elements except ____________.

Options

  • APhysical security
  • BIaaS
  • CApplication security
  • DBusiness drivers

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    9% (2)
  • D
    87% (20)

Why each option

The Cloud Security Alliance's (CSA) Cloud Controls Matrix (CCM) focuses on security controls and architecture elements across various cloud service models, but it does not directly address business drivers as a security architecture element.

APhysical security

Physical security is a key domain within the CSA CCM, addressing controls related to the physical protection of data centers and hardware.

BIaaS

IaaS (Infrastructure as a Service) is a cloud service model with specific security considerations, and the CSA CCM provides controls directly applicable to securing IaaS environments.

CApplication security

Application security is a critical area covered by the CSA CCM, with controls related to securing software applications developed for or deployed in the cloud.

DBusiness driversCorrect

The CSA CCM is a comprehensive framework of security controls organized across various domains relevant to cloud computing, covering elements like physical security, IaaS, and application security. However, 'business drivers' are strategic motivations for cloud adoption or security initiatives, not a specific security architecture element directly within the matrix itself.

Concept tested: CSA CCM scope

Source: https://cloudsecurityalliance.org/research/artifacts/cloud-controls-matrix/

Topics

#CSA CCM#Cloud Controls Matrix#Security frameworks#Cloud security controls

Community Discussion

No community discussion yet for this question.

Full CCSP Practice