Understand Outsourcing and Cloud Contract Design CCSP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What does the 'right to audit' clause in a cloud contract typically grant the customer?

   • AThe right to modify the provider's security controls
   • BThe right to access the provider's premises and review records to verify compliance with contractual and regulatory requirements
   • CThe right to demand a refund at any time
   • DThe right to take over the provider's infrastructure
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is evaluating a cloud provider and has received a SOC 2 Type II report, a PCI DSS attestation, and a summary of the provider's security policies. The company's compliance team needs to verify that the provider's controls are actually implemented as described. The contract is being negotiated, and the team wants to ensure they can perform this verification. Which action is MOST appropriate?

   • ARely on the PCI DSS attestation as proof of security
   • BRequest a copy of the provider's internal audit reports
   • CInclude a right-to-audit clause in the contract
   • DAccept the SOC 2 Type II report as sufficient evidence
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the role of assurance clauses in a cloud contract?

   • ATo transfer all risk to the customer
   • BTo provide mechanisms for the customer to gain confidence in the provider's security and compliance posture
   • CTo eliminate the need for third-party audits
   • DTo increase the provider's liability limits
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which contractual provision is most directly related to ensuring the customer can access its data after the contract ends?

   • ANon-disclosure agreement (NDA)
   • BService level agreement (SLA)
   • CData return and deletion clause
   • DMaster service agreement (MSA) preamble
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When a cloud contract includes a litigation clause, what does it typically address?

   • AThe governing law, jurisdiction, and dispute resolution process for the contract
   • BThe provider's marketing strategy
   • CThe technical architecture of the cloud service
   • DThe pricing structure of the service
   Reveal Solution Discussion Select an answer first