A company based in Australia is using a cloud provider with data centers in Asia and the US. The company's privacy officer is concerned about the Australian Privacy Principles (APPs). Which action is most important to ensure compliance?

Use a cloud provider that is based in Australia.

Obtain ISO 27001 certification for the company.

Ensure that the cloud provider has a mechanism for cross-border data transfers that complies with the APPs.

Store all data in Australia to avoid cross-border transfer issues.

A company is choosing between two cloud providers. Provider A has a SOC 2 Type I report. Provider B has a SOC 2 Type II report. The company needs to provide evidence of controls to a customer that is a financial institution. Which provider should the company choose?

Either provider, because both reports are equally valid.

Provider A, because Type I reports are less expensive.

Provider B, because the Type II report covers a period of time and demonstrates sustained control effectiveness.

Provider A, because the Type I report is more recent.

CompTIACloud Essentials+

Domain 4Objective 3

Identify the Importance and Impacts of Compliance in the Cloud. CLO-002 Practice Questions (Page 2)

Part of the Governance, Risk, Compliance, and Security for the Cloud domain, which accounts for 22% of the CLO-002 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

22%of the exam

Questions 6–10

6expert · hard
A multinational corporation is evaluating cloud providers for a new analytics platform. The platform will process data from multiple countries. The company wants to demonstrate to its customers that it follows international best practices for security. Which combination of certifications would most effectively demonstrate this?
Select an answer first
7application · medium
A company based in Australia is using a cloud provider with data centers in Asia and the US. The company's privacy officer is concerned about the Australian Privacy Principles (APPs). Which action is most important to ensure compliance?
Select an answer first
8foundation · easy
Which of the following is a regulatory concern that can affect cloud computing environments?
Select an answer first
9expert · hard
A company is choosing between two cloud providers. Provider A has a SOC 2 Type I report. Provider B has a SOC 2 Type II report. The company needs to provide evidence of controls to a customer that is a financial institution. Which provider should the company choose?
Select an answer first
10foundation · easy
A multinational company stores customer data in a cloud region located in a different country from where the data was collected. Which concept describes the legal and regulatory implications of this data's physical location?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLO-002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CLO-002” is a trademark of its owner, used for identification only.

Identify the Importance and Impacts of Compliance in the Cloud. CLO-002 Practice Questions (Page 2)

Questions 6–10

A company based in Australia is using a cloud provider with data centers in Asia and the US. The company's privacy officer is concerned about the Australian Privacy Principles (APPs). Which action is most important to ensure compliance?

Which of the following is a regulatory concern that can affect cloud computing environments?

A company is choosing between two cloud providers. Provider A has a SOC 2 Type I report. Provider B has a SOC 2 Type II report. The company needs to provide evidence of controls to a customer that is a financial institution. Which provider should the company choose?

A multinational company stores customer data in a cloud region located in a different country from where the data was collected. Which concept describes the legal and regulatory implications of this data's physical location?

Keep studying — Governance, Risk, Compliance, and Security for the Cloud