nerdexam
(ISC)2

CCSP · Question #816

To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

The correct answer is C. Security control administration. In a shared responsibility model, cloud providers can offer customers access to audit logs, performance data, DLP solution results, and SIEM/SEM log feeds to support transparency and monitoring. However, a provider would not offer 'security control administration' to the…

Submitted by certguy· Apr 18, 2026Cloud Security Operations

Question

To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

Options

  • AAccess to audit logs and performance data
  • BDLP solution results
  • CSecurity control administration
  • DSIM, SEIM. and SEM logs

How the community answered

(58 responses)
  • A
    16% (9)
  • B
    3% (2)
  • C
    72% (42)
  • D
    9% (5)

Explanation

In a shared responsibility model, cloud providers can offer customers access to audit logs, performance data, DLP solution results, and SIEM/SEM log feeds to support transparency and monitoring. However, a provider would not offer 'security control administration' to the customer - the administration of the provider's own security controls is exclusively the provider's responsibility. Giving customers administrative control over the provider's security systems would undermine multi-tenant security and violate the provider's operational sovereignty.

Topics

#Shared Responsibility Model#Cloud Monitoring#Cloud Provider Responsibilities#Security Operations

Community Discussion

No community discussion yet for this question.

Full CCSP Practice