MENU
When selecting a cloud provider, which of the following provides the MOST comprehensive information regarding the current status and effectiveness of the provider's controls?
Suggested Answer: B
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
24 comments · newest first
MA
Marylin
10 months ago
I thought third-party audits were the gold standard for this!
LI
Ligia
11 months ago
Wait, can we really trust self-assessments? Seems sketchy.
ST
Stevie
11 months ago
Maturity assessments? Not sure they give the full picture.
EM
Emilio
11 months ago
I think globally recognized certifications are pretty solid too.
CE
Celeste
11 months ago
Third-party audit reports are usually the most reliable!
AL
Alishia
12 months ago
Maturity assessments seem like they could help, but I don't recall them being as thorough as an audit report in our practice questions.
FL
Fletcher
12 months ago
I feel like control self-assessments could be useful, but they might not be as reliable as third-party audits since they can be biased.
PA
Pansy
12 months ago
I think globally recognized certifications are important, but they might not give the full picture of current effectiveness like an audit report would.
TA
Tamar
1 year ago
I remember we discussed how third-party audit reports can provide a detailed view of a provider's controls, but I'm not entirely sure if they are the most comprehensive.
TE
Teresita
1 year ago
I think the third-party audit report is the most comprehensive option here. That should give the best overview of the provider's controls.
LE
Lezlie
1 year ago
Hmm, I'm not totally sure about this. I'll have to review my notes on cloud provider assessments.
FR
Fredric
1 year ago
This looks like a tricky one. I'll need to think carefully about the differences between the options.
VA
Valentine
1 year ago
A globally recognized certification could be a good indicator, but I'm not sure if it provides the same level of detail as a full audit report.
EL
Elinore
1 year ago
Okay, I think I've got this. The solution of adding the GitHub app connector doesn't seem to directly address the goal of monitoring OAuth authentication requests. I'll need to explore other options within Microsoft Defender for Cloud Apps to see if there's a better way to meet the requirement.
NA
Natalya
1 year ago
Hmm, I'm not sure about this one. Selecting Analytics & reports in the Teams admin center seems like a logical step, but I'm not confident it will actually identify the network packet loss during the pilot calls.
HO
Hortencia
1 year ago
Hmm, this question seems a bit tricky. I'll need to carefully read through each statement and think about which ones are true regarding ownership of shared entities.
MA
Major
1 year ago
I feel pretty confident that the answer is B - using a call policy rule in the Expressway-E. That seems like the most direct way to block a specific destination from external callers. The other options don't seem as relevant to this particular scenario.
MA
Marjory
1 year ago
I feel like this question is similar to one we did in class where restrictions were deemed unfair. I think it’s false, but I’m not completely confident.
ER
Erinn
2 years ago
Yes, that's a good point. It's important for the provider to regularly assess their own controls as well.
CH
Charlene
2 years ago
I think a control self-assessment could also provide valuable insights into the provider's controls.
ER
Erinn
2 years ago
That's true, but a certification may not always involve a detailed audit like a third-party report.
FE
Felicidad
2 years ago
But wouldn't a globally recognized certification also show that the provider meets certain standards?
DA
Daryl
2 years ago
I agree with Erinn, a third-party audit report gives an independent verification of the provider's controls.
ER
Erinn
2 years ago
I think the most comprehensive information would be provided by a third-party audit report.