Exam CCSP topic 1 question 316 discussion

Actual exam question from ISC's CCSP

Question #: 316
Topic #: 1

With the rapid emergence of cloud computing, very few regulations were in place that pertained to it specifically, and organizations often had to resort to using a collection of regulations that were not specific to cloud in order to drive audits and policies.
Which standard from the ISO/IEC was designed specifically for cloud computing?

A. ISO/IEC 27001
B. ISO/IEC 19889
C. ISO/IEC 27001:2015
D. ISO/IEC 27018

Show Suggested Answer

Suggested Answer: D 🗳️

by akg001 at May 22, 2022, 12:28 p.m.

Comments

Submit Cancel

MaciekMT

1 month, 3 weeks ago

Selected Answer: D

ISO/IEC 27018 is the first international standard specifically designed for cloud computing, focusing on the protection of Personally Identifiable Information (PII) in public clouds. It provides guidelines for cloud service providers to ensure data privacy and regulatory compliance. Why Not the Others? A. ISO/IEC 27001: A general information security management system (ISMS) standard, but not specific to cloud computing. B. ISO/IEC 19889: This is not a widely recognized cloud security standard. C. ISO/IEC 27001:2015: This is just the 2015 revision of ISO 27001, still not cloud-specific.

upvoted 1 times

...

akg001

4 months, 4 weeks ago

Selected Answer: D

D. ISO/IEC 27018

upvoted 2 times

...

Exam CCSP All Questions

View all questions & answers for the CCSP exam

Exam CCSP topic 1 question 316 discussion

Comments

MaciekMT

akg001

SY0-701