Isaca Certified in Risk and Information Systems Control CRISC Question # 355 Topic 36 Discussion
CRISC Exam Topic 36 Question 355 Discussion:
Question #: 355
Topic #: 36
Which of the following should be used as the PRIMARY basis for evaluating the state of an organization's cloud computing environment against leading practices?
A.
The cloud environment's capability maturity model
B.
The cloud environment's risk register
C.
The cloud computing architecture
D.
The organization's strategic plans for cloud computing
Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction. The cloud computing architecture is the structure and design of the cloud environment, which includes the components, services, interfaces, standards, and configurations. The cloud computing architecture should be used as the primary basis for evaluating the state of an organization’s cloud computing environment against leading practices, as it determines the performance, security, reliability, scalability, and interoperability of the cloud services. By comparing the cloud computing architecture with the best practices and benchmarks in the industry, an organization can identify the gaps and weaknesses in the cloud environment and implement the necessary improvements and controls. References = CRISC Review Manual, 7th Edition, page 156.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit