Discuss ISC2 CCSP Exam Topic 3 Question 111

To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

AAccess to audit logs and performance data

BDLP solution results

CSecurity control administration

DSIM, SEIM. and SEM logs

Suggested Answer: C

While the provider might share any of the other options listed, the provider will not share administration of security controls with the customer. Security controls are the sole province of the provider.

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Nan 5 months ago

True, but I still feel C is the right choice. Providers focus on infrastructure, not security controls.

Robt 5 months ago

But what about A? Access to audit logs is crucial for customers.

Breana 6 months ago

I agree, C makes sense. Providers usually don’t handle that directly.

Nichelle 6 months ago

I think the answer is C. Security control administration should be the customer's job.

Paris 6 months ago

Yeah, I’m surprised they wouldn’t share audit logs.

Wenona 6 months ago

I thought they might provide DLP results, but I guess not!

Vi 6 months ago

Wait, are we sure about D? That seems important too.

Jolene 6 months ago

I agree, C is the odd one out here!

Dominque 7 months ago

Definitely not C, they usually don’t give that up.

Lashon 7 months ago

I bet the provider is just trying to hide all the embarrassing security breaches in those DLP logs!

Lai 7 months ago

Haha, the provider is like, "Sorry, that's our little secret. You don't get to see the DLP stuff!"

Curt 8 months ago

Hmm, I'm not sure. Wouldn't the customer want to see the DLP results too? Seems like an important part of shared responsibilities.

Thea 8 months ago

I agree, B is the odd one out here. The provider should give the customer access to the other monitoring and testing data.

Hana 8 months ago

The correct answer is B) DLP solution results. The cloud provider would not provide that to the customer.

Brandon 8 months ago

I feel like DLP solution results might not be shared, but I need to double-check my notes on that.

Nickole 8 months ago

SIM, SEIM, and SEM logs sound like something the provider would provide, but I can't recall if they always do.

Una 8 months ago

I remember a practice question that mentioned security control administration might be the customer's responsibility, so I'm leaning towards C.

Marguerita 9 months ago

I think the provider would definitely offer access to audit logs and performance data, but I'm not sure about DLP results.

Jamey 9 months ago

I feel pretty confident about this one. The provider would want to give the customer as much visibility as possible, so the exception is likely the DLP solution results.

Shawnna 9 months ago

I've got a strategy - I'll eliminate the options I'm sure about first, then focus on the remaining two to decide which one the provider would not offer.

Haydee 9 months ago

I'm a bit confused on the difference between those monitoring and logging solutions. I'll need to review my notes to make sure I understand them.

Penney 9 months ago

Okay, let's see. The provider would likely offer access to audit logs, performance data, and security control administration, so that leaves DLP solution results or SIM/SIEM/SEM logs as the exception.

William 10 months ago

Hmm, this one seems tricky. I'll need to think through the shared responsibilities carefully.

Shantell 3 months ago

↳ replying to William

Yeah, that makes sense. They usually don’t provide those.

Sheridan 4 months ago

↳ replying to William

I think DLP solution results might be the answer.

Lashonda 5 months ago

↳ replying to William

I agree, it’s definitely a tricky question.

ISC2 CCSP Exam - Topic 3 Question 111 Discussion