nerdexam
(ISC)2

CCSP · Question #162

All of the following entitles are required to use FedRAMP-accredited Cloud Service Providers except ___________.

The correct answer is C. Federal Express. FedRAMP is a government-wide program that standardizes security assessments for cloud products and services used by federal agencies, thus only federal entities are mandated to use FedRAMP-accredited providers.

Submitted by femi9· Apr 18, 2026Legal, Risk and Compliance

Question

All of the following entitles are required to use FedRAMP-accredited Cloud Service Providers except ___________.

Options

  • AThe US post office
  • BThe Department of Homeland Security
  • CFederal Express
  • DThe CIA

How the community answered

(19 responses)
  • B
    5% (1)
  • C
    89% (17)
  • D
    5% (1)

Why each option

FedRAMP is a government-wide program that standardizes security assessments for cloud products and services used by federal agencies, thus only federal entities are mandated to use FedRAMP-accredited providers.

AThe US post office

The US Post Office (USPS) is an independent agency of the executive branch of the United States federal government, making it subject to FedRAMP requirements.

BThe Department of Homeland Security

The Department of Homeland Security (DHS) is a cabinet department of the U.S. federal government, which mandates its use of FedRAMP-accredited cloud services.

CFederal ExpressCorrect

Federal Express (FedEx) is a private, multinational courier delivery services company, not a federal government agency or entity, and therefore is not mandated to use FedRAMP-accredited Cloud Service Providers. FedRAMP specifically applies to US federal agencies and their contractors using cloud services to process federal data.

DThe CIA

The Central Intelligence Agency (CIA) is an agency of the U.S. federal government, and like other federal entities, is required to use FedRAMP-accredited cloud services.

Concept tested: FedRAMP applicability and scope

Source: https://www.fedramp.gov/about-us/

Topics

#FedRAMP#Compliance#Regulatory frameworks#Government cloud

Community Discussion

No community discussion yet for this question.

Full CCSP Practice