A company is facing a lawsuit and must produce electronically stored information (ESI) from a cloud-based email system. The company uses a cloud provider that offers a litigation hold feature. However, the legal team is concerned that the provider's litigation hold may not capture all relevant ESI, such as metadata and deleted items. What is the most effective way to ensure comprehensive preservation?

Ask the provider to delete all data that is not relevant to the case to reduce the scope of preservation.

Take a full backup of the entire cloud environment and store it on tape for the duration of the litigation.

Export all relevant ESI to a secure, immutable storage location and preserve it independently of the provider.

Rely solely on the provider's litigation hold feature, as it is designed to preserve all data.

A company is considering moving its customer relationship management (CRM) system to a public cloud provider. The company is concerned about vendor lock-in. Which of the following is the most effective strategy to mitigate vendor lock-in?

Design the application to use open standards and portable data formats.

Sign a long-term contract with the cloud provider to ensure stability.

Use the cloud provider's proprietary APIs and services to maximize functionality.

Store all data in a proprietary database format to ensure performance.

Which of the following best describes a common consequence of conflicting international legislation for a cloud service provider (CSP) operating in multiple countries?

The CSP may face legal penalties in one country for complying with the lawful demands of another country.

The CSP is exempt from local laws if it has a global privacy policy.

The CSP can rely on its customers to resolve all legal conflicts.

The CSP can choose to follow the laws of its home country exclusively, regardless of where data is stored.

In the context of eDiscovery in cloud environments, what is the primary purpose of the identification phase?

To locate and inventory all potentially relevant electronically stored information (ESI) that may be subject to legal hold or production.

To permanently delete data that is no longer needed for the legal case.

To produce the data to the requesting party in a specified format.

To analyze the content of all data to determine its legal privilege.

Certified Cloud Security Professional

Domain 6Objective 1

Articulate Legal Requirements and Unique Risks Within the Cloud Environment CCSP Practice Questions (Page 3)

Part of the Legal, Risk and Compliance domain, which accounts for 13% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

13%of the exam

Questions 11–15

11expert · hard
A company is facing a lawsuit and must produce electronically stored information (ESI) from a cloud-based email system. The company uses a cloud provider that offers a litigation hold feature. However, the legal team is concerned that the provider's litigation hold may not capture all relevant ESI, such as metadata and deleted items. What is the most effective way to ensure comprehensive preservation?
Select an answer first
12application · medium
A company is considering moving its customer relationship management (CRM) system to a public cloud provider. The company is concerned about vendor lock-in. Which of the following is the most effective strategy to mitigate vendor lock-in?
Select an answer first
13foundation · easy
Which of the following best describes a common consequence of conflicting international legislation for a cloud service provider (CSP) operating in multiple countries?
Select an answer first
14foundation · easy
In the context of eDiscovery in cloud environments, what is the primary purpose of the identification phase?
Select an answer first
15foundation · easy
Which of the following is a legal framework that applies specifically to the handling of protected health information (PHI) in the United States and can affect cloud services that store or process such data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Articulate Legal Requirements and Unique Risks Within the Cloud Environment CCSP Practice Questions (Page 3)

Questions 11–15

A company is considering moving its customer relationship management (CRM) system to a public cloud provider. The company is concerned about vendor lock-in. Which of the following is the most effective strategy to mitigate vendor lock-in?

Which of the following best describes a common consequence of conflicting international legislation for a cloud service provider (CSP) operating in multiple countries?

In the context of eDiscovery in cloud environments, what is the primary purpose of the identification phase?

Which of the following is a legal framework that applies specifically to the handling of protected health information (PHI) in the United States and can affect cloud services that store or process such data?

Keep studying — Legal, Risk and Compliance