ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ143

VerifiedCloud Penetration Testing Methodology

Gibson, a security analyst at MileTech Solutions, is conducting cloud penetration testing. As part of this process, he must check for any governance and compliance issues involving cloud services.

Which document helps Gibson determine whether the CSP is regularly audited and certified for compliance issues?

Explanation

A service level agreement documents the cloud service provider’s contractual service commitments and can require ongoing compliance assurance, such as periodic independent audits and maintenance of relevant certifications. Data-use agreements govern permitted handling of data, rules of engagement authorize and bound testing activities, and nondisclosure agreements protect confidential information.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!