Which of the following are contractual components that the CSP should review and understand fully when contracting with a cloud service provider? (Choose two.)

Concurrently maintainable site infrastructure is a technical design aspect that contributes to availability, but its specifics are typically a provider's internal concern, not an explicit contractual component a customer reviews in detail.

Understanding the use of subcontractors is critical as it identifies third parties who may access or process the customer's data, impacting security, compliance, and data sovereignty. This allows the customer to assess extended supply chain risks.

Redundant site infrastructure capacity components are technical details that ensure resilience; customers primarily focus on the service levels (SLAs) for availability, rather than the specific internal components achieving it.

Defining the scope of processing explicitly outlines what data the cloud provider is authorized to collect, store, process, and transmit, for what purposes, and under what conditions. This is fundamental for regulatory compliance, especially with data protection laws like GDPR, ensuring the provider does not exceed its contractual authority.