CCSP · Question #816
To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:
The correct answer is C. Security control administration. In a shared responsibility model, cloud providers can offer customers access to audit logs, performance data, DLP solution results, and SIEM/SEM log feeds to support transparency and monitoring. However, a provider would not offer 'security control administration' to the…
Question
To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:
Options
- AAccess to audit logs and performance data
- BDLP solution results
- CSecurity control administration
- DSIM, SEIM. and SEM logs
How the community answered
(58 responses)- A16% (9)
- B3% (2)
- C72% (42)
- D9% (5)
Explanation
In a shared responsibility model, cloud providers can offer customers access to audit logs, performance data, DLP solution results, and SIEM/SEM log feeds to support transparency and monitoring. However, a provider would not offer 'security control administration' to the customer - the administration of the provider's own security controls is exclusively the provider's responsibility. Giving customers administrative control over the provider's security systems would undermine multi-tenant security and violate the provider's operational sovereignty.
Topics
Community Discussion
No community discussion yet for this question.