Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CCSP Exam - Topic 3 Question 111 Discussion

Actual exam question for ISC2's CCSP exam
Question #: 111
Topic #: 3
[All CCSP Questions]

To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

Show Suggested Answer Hide Answer
Suggested Answer: C

While the provider might share any of the other options listed, the provider will not share administration of security controls with the customer. Security controls are the sole province of the provider.


Contribute your Thoughts:

0/2000 characters
Wenona
1 day ago
I thought they might provide DLP results, but I guess not!
upvoted 0 times
...
Vi
6 days ago
Wait, are we sure about D? That seems important too.
upvoted 0 times
...
Jolene
12 days ago
I agree, C is the odd one out here!
upvoted 0 times
...
Dominque
17 days ago
Definitely not C, they usually don’t give that up.
upvoted 0 times
...
Lashon
22 days ago
I bet the provider is just trying to hide all the embarrassing security breaches in those DLP logs!
upvoted 0 times
...
Lai
27 days ago
Haha, the provider is like, "Sorry, that's our little secret. You don't get to see the DLP stuff!"
upvoted 0 times
...
Curt
2 months ago
Hmm, I'm not sure. Wouldn't the customer want to see the DLP results too? Seems like an important part of shared responsibilities.
upvoted 0 times
...
Thea
2 months ago
I agree, B is the odd one out here. The provider should give the customer access to the other monitoring and testing data.
upvoted 0 times
...
Hana
2 months ago
The correct answer is B) DLP solution results. The cloud provider would not provide that to the customer.
upvoted 0 times
...
Brandon
2 months ago
I feel like DLP solution results might not be shared, but I need to double-check my notes on that.
upvoted 0 times
...
Nickole
2 months ago
SIM, SEIM, and SEM logs sound like something the provider would provide, but I can't recall if they always do.
upvoted 0 times
...
Una
2 months ago
I remember a practice question that mentioned security control administration might be the customer's responsibility, so I'm leaning towards C.
upvoted 0 times
...
Marguerita
3 months ago
I think the provider would definitely offer access to audit logs and performance data, but I'm not sure about DLP results.
upvoted 0 times
...
Jamey
3 months ago
I feel pretty confident about this one. The provider would want to give the customer as much visibility as possible, so the exception is likely the DLP solution results.
upvoted 0 times
...
Shawnna
3 months ago
I've got a strategy - I'll eliminate the options I'm sure about first, then focus on the remaining two to decide which one the provider would not offer.
upvoted 0 times
...
Haydee
3 months ago
I'm a bit confused on the difference between those monitoring and logging solutions. I'll need to review my notes to make sure I understand them.
upvoted 0 times
...
Penney
3 months ago
Okay, let's see. The provider would likely offer access to audit logs, performance data, and security control administration, so that leaves DLP solution results or SIM/SIEM/SEM logs as the exception.
upvoted 0 times
...
William
4 months ago
Hmm, this one seems tricky. I'll need to think through the shared responsibilities carefully.
upvoted 0 times
...

Save Cancel