CV0-003 · Question #185
Which of the following is included in a compliance audit?
The correct answer is C. Analyzing identity management and access controls. Compliance audits focus on evaluating security controls, and identity management and access controls are a core area examined to verify adherence to regulatory requirements.
Question
Which of the following is included in a compliance audit?
Options
- AAnalyzing chargeback agreements
- BAnalyzing cloud provider Service Level Agreements (SLAs)
- CAnalyzing identity management and access controls
- DAnalyzing the provider release calendar
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- C93% (28)
Why each option
Compliance audits focus on evaluating security controls, and identity management and access controls are a core area examined to verify adherence to regulatory requirements.
Chargeback agreements are financial or billing arrangements between departments and IT, which fall under financial governance or cost allocation reviews, not compliance audits.
SLA analysis is part of vendor management and service management reviews, not a primary component of a compliance audit focused on regulatory or security controls.
Compliance audits assess whether an organization's security posture meets required standards such as ISO 27001, SOC 2, HIPAA, or PCI-DSS. Identity management and access controls - including authentication mechanisms, role-based access, and privileged account governance - are fundamental control domains evaluated in virtually every compliance framework. Auditors verify that only authorized individuals have appropriate access to sensitive systems and data.
A provider's release calendar is an operational planning or change management artifact and is not evaluated as part of a compliance audit.
Concept tested: Compliance audit scope - identity and access controls
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/identity-management-best-practices
Topics
Community Discussion
No community discussion yet for this question.