Evaluating Cloud Service Providers CSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A financial services company is evaluating a cloud provider to host customer transaction data. The company must comply with GDPR and local banking regulations that require data to remain within the country. The provider offers a region in that country and has ISO 27001 certification. What additional evaluation step is most critical?

   • ARequest a copy of the provider's latest penetration test report
   • BVerify that the provider's data processing agreement (DPA) includes GDPR-compliant clauses and that sub-processors are listed and approved
   • CConfirm that the provider's ISO 27001 certification covers all data centers globally
   • DAsk the provider to store all data on dedicated hardware within the country
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When assessing a cloud service provider's incident response capabilities, which of the following should be reviewed?

   • AThe provider's marketing brochures and website content
   • BThe provider's pricing calculator
   • CThe provider's list of available virtual machine sizes
   • DThe provider's incident response policy and communication procedures
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a key factor in determining data sovereignty?

   • AThe number of copies of the data stored
   • BThe type of encryption used to protect the data
   • CThe legal jurisdiction that has authority over the data based on where it is stored
   • DThe cloud provider's market share
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is evaluating a cloud provider's support plan. The company has a 24/7 operation and needs immediate assistance for critical incidents. The provider offers three support tiers: basic (community forums), developer (business-hours email), and business (24/7 phone with a 1-hour response time for critical issues). Which tier should the company choose?

   • ADeveloper tier, because email support is acceptable for a 24/7 operation
   • BBusiness tier, because it provides 24/7 phone support with a defined response time for critical incidents
   • CBasic tier, because community forums are sufficient for most issues
   • DNo support plan, because the company can rely on its own expertise
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is vendor lock-in in the context of cloud computing?

   • AThe provider's guarantee of service availability
   • BThe difficulty of migrating workloads and data away from a cloud provider due to technical, contractual, or cost barriers
   • CThe process of encrypting data before storing it in the cloud
   • DThe requirement to use a specific cloud provider for all services
   Reveal Solution Discussion Select an answer first