Exam CCSP topic 1 question 452 discussion

Actual exam question from ISC's CCSP

Question #: 452
Topic #: 1

To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

A. Access to audit logs and performance data
B. DLP solution results
C. Security control administration
D. SIM, SEIM. and SEM logs

Show Suggested Answer

Suggested Answer: C 🗳️
While the provider might share any of the other options listed, the provider will not share administration of security controls with the customer. Security controls are the sole province of the provider.

by yesj at Oct. 26, 2020, 10:21 a.m.

Comments

Submit Cancel

MaciekMT

1 month, 1 week ago

Selected Answer: B

In a shared monitoring and testing model within a cloud environment, cloud providers typically offer visibility into security controls, logs, and administrative functions. However, DLP (Data Loss Prevention) solution results are generally not provided by the cloud provider because: DLP is typically a customer-side control, meaning the customer manages and implements DLP policies. Cloud providers focus on infrastructure security, while DLP focuses on data-level security within the customer's environment. DLP results are highly sensitive and specific to an organization’s data policies, and sharing them could pose security and privacy risks.

upvoted 1 times

...