CCSP · Question #300
You are the security manager for a small retail business involved mainly in direct e-commerce transactions with individual customers (members of the public). The bulk of your market is in Asia, but…
The correct answer is B. Tier 4 of the Uptime Institute certifications. For a business dealing with life-support equipment, extreme reliability and availability are critical, necessitating a cloud provider with a Tier 4 Uptime Institute certification.
Question
You are the security manager for a small retail business involved mainly in direct e-commerce transactions with individual customers (members of the public). The bulk of your market is in Asia, but you do fulfill orders globally. Your company has its own data center located within its headquarters building in Hong Kong, but it also uses a public cloud environment for contingency backup and archiving purposes. Your company has decided to expand its business to include selling and monitoring life-support equipment for medical providers. What characteristic do you need to ensure is offered by your cloud provider? Response:
Options
- AFull automation of security controls within the cloud data center
- BTier 4 of the Uptime Institute certifications
- CGlobal remote access
- DPrevention of ransomware infections
How the community answered
(16 responses)- A13% (2)
- B81% (13)
- C6% (1)
Why each option
For a business dealing with life-support equipment, extreme reliability and availability are critical, necessitating a cloud provider with a Tier 4 Uptime Institute certification.
While full automation of security controls is beneficial for efficiency and consistency, it does not directly address the fundamental infrastructure availability and uptime requirements critical for life-support systems.
A Tier 4 certification from the Uptime Institute indicates a fault-tolerant data center design with 99.995% availability, meaning redundant components and multiple active power and cooling distribution paths. This highest level of certification ensures the continuous operation and reliability essential for supporting critical medical life-support equipment, where downtime is unacceptable.
Global remote access is a feature for accessibility, but it does not guarantee the underlying reliability and uptime of the data center infrastructure itself, which is paramount for medical devices.
Prevention of ransomware infections is a vital security control, but it is a security measure rather than a fundamental infrastructure characteristic guaranteeing the high availability and resilience needed for life-support systems.
Concept tested: Data center tier levels for critical systems
Source: https://uptimeinstitute.com/tiers
Topics
Community Discussion
No community discussion yet for this question.