nerdexam
(ISC)2

CCSP · Question #255

Legal controls refer to which of the following?

The correct answer is D. Controls designed to comply with laws and regulations related to the cloud environment. Legal controls are controls specifically implemented to achieve compliance with applicable laws, regulations, and contractual obligations in a given environment. ISO 27001, PCI DSS, and NIST 800-53r4 are specific frameworks or standards - they may inform legal controls, but they

Submitted by saadiq_pk· Apr 18, 2026Legal, Risk and Compliance

Question

Legal controls refer to which of the following?

Options

  • AISO 27001
  • BPCI DSS
  • CNIST 800-53r4
  • DControls designed to comply with laws and regulations related to the cloud environment

How the community answered

(65 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    2% (1)
  • D
    92% (60)

Explanation

Legal controls are controls specifically implemented to achieve compliance with applicable laws, regulations, and contractual obligations in a given environment. ISO 27001, PCI DSS, and NIST 800-53r4 are specific frameworks or standards - they may inform legal controls, but they are not the definition of legal controls itself. The correct answer directly defines what legal controls are: measures designed to comply with laws and regulations.

Topics

#legal controls#compliance#laws and regulations#governance

Community Discussion

No community discussion yet for this question.

Full CCSP Practice