CISSP · Question #878
CISSP Question #878: Real Exam Question with Answer & Explanation
Sign in or unlock CISSP to reveal the answer and full explanation for question #878. The question stem and answer options stay visible for context.
Question
A large international organization that collects information from its consumers has contracted with a Software as a Service (SaaS) cloud provider to process this data. The SaaS cloud provider uses additional data processing to demonstrate other capabilities it wishes to offer to the data owner. This vendor believes additional data processing activity is allowed since they are not disclosing to other organizations. Which of the following BEST supports this rationale?
Options
- AThe data was encrypted at all times and only a few cloud provider employees had access.
- BAs the data owner, the cloud provider has the authority to direct how the data will be processed.
- CAs the data processor, the cloud provider has the authority to direct how the data will be
- DThe agreement between the two parties is vague and does not detail how the data can be used.
Unlock CISSP to see the answer
You've previewed enough free CISSP questions. Unlock CISSP for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.