What is supply-chain management in the context of cloud outsourcing?

Managing the physical delivery of cloud hardware

Managing the customer's employee training

Managing the customer's internal procurement process

Managing the risks associated with the provider's own suppliers and subcontractors

A company is negotiating a cloud contract and the vendor's SLA states that 'availability' is 99.9%. However, the company's internal team has identified that the vendor's definition of 'availability' excludes scheduled maintenance and 'force majeure' events. The company's legal counsel argues that this definition is too broad and could be exploited. What is the MOST effective way to address this concern in the contract?

Add a clause that allows the company to terminate the contract if availability drops below 99.9%

Include a detailed definition of 'availability' and 'outage' in the SLA

Move the availability metric from the SLA to the MSA

Accept the definition but negotiate for a higher service credit percentage

In a cloud contract, why might a customer require the provider to maintain cyber risk insurance?

To ensure the provider has financial resources to cover liabilities arising from a security incident

To transfer all liability to the insurer

To guarantee the provider will not be sued

To eliminate the customer's own insurance needs

Why is it important for a cloud contract to include clear definitions of terms such as 'availability' and 'downtime'?

To give the provider more flexibility in interpreting the terms

To make the contract longer and more detailed

To satisfy regulatory requirements only

To avoid disputes by ensuring both parties interpret performance metrics consistently

Certified Cloud Security Professional

Domain 6Objective 5

Understand Outsourcing and Cloud Contract Design CCSP Practice Questions (Page 7)

Part of the Legal, Risk and Compliance domain, which accounts for 13% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

12concepts

13%of the exam

12 Concepts in This Objective

Business Requirements in Cloud Contracts
Vendor Assessments
Vendor Lock-in Risks
Vendor Viability and Escrow
Right to Audit
Contract Metrics and Definitions
Termination and Litigation
Assurance and Compliance in Contracts
Access to Cloud and Data
Cyber Risk Insurance
Data Ownership and Security Requirements
Supply-Chain Management in Cloud

Questions 31–34

31foundation · easy
What is supply-chain management in the context of cloud outsourcing?
Select an answer first
32expert · hard
A company is negotiating a cloud contract and the vendor's SLA states that 'availability' is 99.9%. However, the company's internal team has identified that the vendor's definition of 'availability' excludes scheduled maintenance and 'force majeure' events. The company's legal counsel argues that this definition is too broad and could be exploited. What is the MOST effective way to address this concern in the contract?
Select an answer first
33foundation · easy
In a cloud contract, why might a customer require the provider to maintain cyber risk insurance?
Select an answer first
34foundation · easy
Why is it important for a cloud contract to include clear definitions of terms such as 'availability' and 'downtime'?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Understand Outsourcing and Cloud Contract Design CCSP Practice Questions (Page 7)

Questions 31–34

What is supply-chain management in the context of cloud outsourcing?

In a cloud contract, why might a customer require the provider to maintain cyber risk insurance?

Why is it important for a cloud contract to include clear definitions of terms such as 'availability' and 'downtime'?

Keep studying — Legal, Risk and Compliance