nerdexam
(ISC)2

CCSP · Question #78

Which of the following is not one of the defined security controls domains within the Cloud Controls Matrix, published by the Cloud Security Alliance?

The correct answer is A. Financial. The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) defines various security control domains, but 'Financial' is not one of them.

Submitted by naveen.iyer· Apr 18, 2026Legal, Risk and Compliance

Question

Which of the following is not one of the defined security controls domains within the Cloud Controls Matrix, published by the Cloud Security Alliance?

Options

  • AFinancial
  • BHuman resources
  • CMobile security
  • DIdentity and access management

How the community answered

(13 responses)
  • A
    92% (12)
  • C
    8% (1)

Why each option

The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) defines various security control domains, but 'Financial' is not one of them.

AFinancialCorrect

'Financial' is not a defined security control domain within the Cloud Controls Matrix (CCM) published by the Cloud Security Alliance; the CCM primarily focuses on technical, operational, and organizational security aspects.

BHuman resources

'Human resources' (HRM) is a defined domain in the CCM, covering personnel security and training aspects.

CMobile security

'Mobile security' (MOS) is a defined domain in the CCM, addressing security considerations for mobile devices and applications.

DIdentity and access management

'Identity and access management' (IAM) is a fundamental and prominent domain within the CCM, covering user authentication and authorization controls.

Concept tested: CSA Cloud Controls Matrix (CCM) domains

Source: https://cloudsecurityalliance.org/research/cloud-controls-matrix/

Topics

#Cloud Controls Matrix (CCM)#Cloud Security Alliance (CSA)#Security Controls Frameworks#Compliance

Community Discussion

No community discussion yet for this question.

Full CCSP Practice