Understand Outsourcing and Cloud Contract Design CCSP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Why is the right to audit important for a cloud customer?

   • AIt guarantees the provider will never suffer a security breach
   • BIt provides a mechanism for the customer to independently verify the provider's compliance and security posture
   • CIt eliminates the need for the customer to conduct its own risk assessments
   • DIt allows the customer to control the provider's daily operations
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company is contracting with a cloud provider to host its customer database. The company's legal team wants to ensure that the company retains ownership of its data and that the provider cannot use the data for its own purposes. Which clause should be included in the contract?

   • AA right-to-audit clause
   • BA data retention clause
   • CA data ownership clause
   • DA service credit clause
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of a termination clause in a cloud contract?

   • ATo increase the contract duration automatically
   • BTo define the conditions under which either party can end the contract and the process for doing so
   • CTo transfer the contract to another provider automatically
   • DTo guarantee that the contract will never be terminated
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   When assessing a cloud vendor's viability, which factor is most important to consider?

   • AThe vendor's number of employees only
   • BThe vendor's office location
   • CThe vendor's financial stability and long-term business outlook
   • DThe vendor's marketing budget
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A public sector organization is required to demonstrate compliance with a national cybersecurity framework. They are negotiating a contract with a cloud provider and need to ensure they can independently verify the provider's security controls. The provider has offered to share its latest audit report, but the organization's legal team wants a contractual right to perform its own checks. Which clause should the organization insist on including in the contract?

   • AA right-to-audit clause
   • BA data retention clause
   • CA service credit clause
   • DA mutual non-disclosure agreement
   Reveal Solution Discussion Select an answer first