Exam CCSP topic 1 question 202 discussion

Actual exam question from ISC's CCSP

Question #: 202
Topic #: 1

One of the main components of system audits is the ability to track changes over time and to match these changes with continued compliance and internal processes.
Which aspect of cloud computing makes this particular component more challenging than in a traditional data center?

A. Portability
B. Virtualization
C. Elasticity
D. Resource pooling

Show Suggested Answer

Suggested Answer: B 🗳️
Cloud services make exclusive use of virtualization, and systems change over time, including the addition, subtraction, and reimaging of virtual machines. It is extremely unlikely that the exact same virtual machines and images used in a previous audit would still be in use or even available for a later audit, making the tracking of changes over time extremely difficult, or even impossible. Elasticity refers to the ability to add and remove resources from a system or service to meet current demand, and although it plays a factor in making the tracking of virtual machines very difficult over time, it is not the best answer in this case. Resource pooling pertains to a cloud environment sharing a large amount of resources between different customers and services. Portability refers to the ability to move systems or services easily between different cloud providers.

by NileshGavali at July 23, 2020, 9:09 a.m.

Comments

Submit Cancel

cloudenthusiast

9 months ago

Selected Answer: B

Virtualization as it is difficult for the audit trail

upvoted 1 times

...

gayan237

1 year, 4 months ago

so, if its virtualization only on cloud-computing, is that mean you don't have virtualization in on-prem ? resource pooling makes it tough in cloud because it leads to other clients also using the same resource (hardware CPU, RAM, space) as you which makes it tough to audit.

upvoted 3 times

...

Pika26

1 year, 6 months ago

Selected Answer: B

B: Virtualization

upvoted 1 times

...

Zeezee2

3 years ago

Virtualization as the creation and destruction of virtualized resources happens all the time so meaningful compliance reporting becomes very difficult, even if you use a baseline for all resources.

upvoted 4 times

...

pooppants

3 years, 8 months ago

wow that is a tough question. I can see valid justifications for all of them!

upvoted 3 times

...

Exam CCSP All Questions

View all questions & answers for the CCSP exam