Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CSA CCSK Exam - Topic 8 Question 61 Discussion

CCM: A company wants to use the IaaS offering of some CSP. Which of the following options for using CCM is NOT suitable for the company as a cloud customer?
D) None of the above
A) Submit the CCM on behalf of the CSP to CSA Security, Trust & Assurance Registry (STAR), a free, publicly accessible registry that documents the security controls provided by CSPs
B) Use CCM to build a detailed list of requirements and controls that they want their CSP to implement
C) Use CCM to help assess the risk associated with the CSP

CSA CCSK Exam - Topic 8 Question 61 Discussion

Actual exam question for CSA's CCSK exam
Question #: 61
Topic #: 8
[All CCSK Questions]

CCM: A company wants to use the IaaS offering of some CSP. Which of the following options for using CCM is NOT suitable for the company as a cloud customer?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Rasheeda at Apr 10, 2024, 10:10 AM

Limited Time Offer

25%

Off

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Eleonore
7 months ago
None of the above? Seems like a trick question!
upvoted 0 times
...
Jesusa
8 months ago
B and C are super useful for any cloud customer!
upvoted 0 times
...
Gretchen
8 months ago
Wait, can you really submit on behalf of the CSP?
upvoted 0 times
...
Graciela
8 months ago
I agree, A seems off.
upvoted 0 times
...
Simona
8 months ago
A is definitely not suitable for the company.
upvoted 0 times
...
Wilbert
9 months ago
I'm a bit confused about option A. Can a customer really submit something on behalf of the CSP? That seems off to me.
upvoted 0 times
...
Anissa
9 months ago
I feel like assessing risk with CCM is a common practice, so option C should be fine too. That leaves us with D as the only possible answer.
upvoted 0 times
...
Honey
9 months ago
I remember practicing a question similar to this, and I think using CCM to build requirements is definitely a valid use case, so that rules out option B.
upvoted 0 times
...
Caren
9 months ago
I think option A might not be suitable because the CCM is meant for the customer, not the CSP. But I'm not entirely sure.
upvoted 0 times
...
Amos
9 months ago
I've got this! The company is looking to use IaaS, so submitting the CCM on behalf of the CSP to the CSA STAR registry is not a suitable option. I'm confident I can get this right.
upvoted 0 times
...
Judy
9 months ago
Okay, let's see. The company wants to use the IaaS offering, so I need to focus on which CCM option is not suitable for that. I'll read the options closely and make my best guess.
upvoted 0 times
...
Lizette
9 months ago
Hmm, I'm a bit unsure about this one. The options seem similar, but I'll try to think through each one carefully and eliminate the one that doesn't fit.
upvoted 0 times
...
Jaime
9 months ago
This question seems straightforward. I'll carefully review the options and choose the one that is not suitable for the company as a cloud customer.
upvoted 0 times
...
Mona
9 months ago
I'm pretty sure one of the tools associated with Design Thinking is Empathy maps, so I'll go with option C.
upvoted 0 times
...
Noel
9 months ago
This looks like a tricky one. I'll need to think through the options carefully.
upvoted 0 times
...
Lezlie
9 months ago
This is a good question to test our understanding of WACC. I think the key is to focus on how the project's characteristics compare to the company's overall profile. With that in mind, I feel prepared to tackle this.
upvoted 0 times
...
Ryan
10 months ago
Okay, I think I've got a handle on this. The implementation method is going to be the step most affected by the shift to a more agile approach. That's where the biggest changes will happen.
upvoted 0 times
...
Ashlyn
2 years ago
Yes, I think the answer is C. Using CCM to assess the risk associated with the CSP is not suitable for the company as a cloud customer.
upvoted 0 times
...
Eva
2 years ago
So, the answer should be C then, right? It's about assessing the company's risk, not the CSP's.
upvoted 0 times
...
Filiberto
2 years ago
That makes sense, Ashlyn. The company needs to ensure they understand the risks involved before choosing a CSP.
upvoted 0 times
...
Ashlyn
2 years ago
I believe option C is not suitable. The company should use CCM to assess their own risk, not the CSP's.
upvoted 0 times
...
Eva
2 years ago
I agree with Filiberto. It's the CSP's responsibility to submit the CCM to STAR.
upvoted 0 times
...
Filiberto
2 years ago
I think option A is not suitable because the company should not submit CCM on behalf of the CSP.
upvoted 0 times
...
Sheron
2 years ago
Using CCM to assess the risk associated with the CSP could also be helpful in making an informed decision.
upvoted 0 times
...
Nana
2 years ago
I agree with Option B seems more appropriate for detailing their own requirements.
upvoted 0 times
...
Della
2 years ago
Because submitting the CCM on behalf of the CSP to STAR may not accurately represent the company's specific requirements.
upvoted 0 times
...
Gladys
2 years ago
Why do you say that, Alice?
upvoted 0 times
...
Della
2 years ago
I think option A is not suitable for the company.
upvoted 0 times
...
Jaclyn
2 years ago
I think options B and C are the way to go. The company can use the CCM to really dig into the details and make sure the CSP is up to snuff.
upvoted 0 times
...
Daniela
2 years ago
Haha, yeah, that's like the company saying, 'Hey CSP, we'll do your job for you. How's that?' Not very practical.
upvoted 0 times
...
Alease
2 years ago
Exactly. I mean, if the company submits the CCM on behalf of the CSP, they might as well just become the CSP themselves. That's just silly.
upvoted 0 times
Colton
2 years ago
Yeah, that would defeat the purpose of using a CSP for IaaS.
upvoted 0 times
...
Reynalda
2 years ago
I think option A is not suitable because it's like taking over the CSP's role.
upvoted 0 times
...
...
Miriam
2 years ago
Agreed. The company should leverage the CCM to ensure the CSP is meeting their specific needs, not take on the CSP's responsibility.
upvoted 0 times
...
Thora
2 years ago
Yeah, you're right. I think option A is not suitable for the company as a cloud customer. They should focus on using the CCM to assess the risk and build their own requirements, as per options B and C.
upvoted 0 times
...
Paris
2 years ago
Hmm, this is a tricky one. I'm not sure if submitting the CCM on behalf of the CSP is a good idea, since that's the CSP's responsibility, right?
upvoted 0 times
...

Save Cancel