CCSP Cloud Legal Risk and Compliance Quiz

1. Which risk management framework is developed by NIST?

FAIR

Cybersecurity Framework

COSO

ISO 31000

2. What is a key requirement for incident response in cloud compliance?

Unlimited response time

Notification of affected parties within regulatory timeframes

Notification only to executives

Delaying public disclosure indefinitely

3. Which legal concept allows data transfer from EU to third countries under GDPR?

Data Localization

Standard Contractual Clauses (SCCs)

Right to Erasure

Data Minimization

4. What is the main purpose of a Business Continuity Plan in cloud compliance?

Market cloud services

Ensure service recovery and minimize downtime

Reduce employee costs

Increase data storage

5. Which assessment type verifies that controls operate effectively over time?

SOC 1 Type I

SOC 2 Type II

ISO 9001

NIST SP 800-171

6. What does CCPA primarily regulate?

California residents' personal data rights

Federal employee benefits

International trade

Environmental standards

7. Which of the following is essential in a cloud vendor contract?

Marketing terms only

Data breach notification requirements

Office location details

Employee social media policies

8. What is a primary concern with data sovereignty in cloud computing?

Cost optimization

Where data physically resides and applicable laws

User interface design

API performance

9. What does right to audit provision in a cloud contract typically allow?

Unlimited customer access to provider systems

Periodic review of security controls and compliance

Free service upgrades

Elimination of audit fees

10. Which regulation primarily governs the protection of personal data for EU residents?

HIPAA

GDPR

PCI-DSS

SOC 2

11. What is the purpose of a Data Processing Agreement (DPA)?

Define how data will be processed and protected

Establish network bandwidth

Manage user authentication

Control physical access

12. Which compliance standard focuses on healthcare data protection?

GDPR

HIPAA

SOX

NIST SP 800-53

13. What is the primary focus of SOC 2 Type II compliance?

Data encryption methods

Controls over time and operational effectiveness

Vendor management only

Network security exclusively

14. Which of the following is a key component of data residency requirements?

Data must be stored in the customer's country

Data can be replicated globally

Data location is irrelevant

All data must be encrypted

15. What does PCI-DSS primarily regulate?

Payment card data security

Healthcare records

Environmental compliance

Employee privacy

16. Which cloud model places the most compliance responsibility on the customer?

SaaS

PaaS

IaaS

FaaS

17. What is the primary purpose of a Service Level Agreement (SLA) in cloud computing?

Define security protocols only

Establish performance metrics and service availability commitments

Handle data encryption exclusively

Manage employee access controls

18. Which regulation applies to publicly traded companies' financial reporting?

GDPR

Sarbanes-Oxley (SOX)

PCI-DSS

HIPAA

19. What does a Business Associate Agreement (BAA) primarily protect?

Payment information

Protected health information (PHI)

Trade secrets

Employee contracts

20. Which framework is most commonly used for cloud security governance?

ITIL

ISO/IEC 27001

COBIT

NIST Cybersecurity Framework

CCSP Cloud Legal Risk and Compliance Quiz

1. Which risk management framework is developed by NIST?

2.

What first name or nickname would you like us to use?

2. What is a key requirement for incident response in cloud compliance?

3. Which legal concept allows data transfer from EU to third countries under GDPR?

4. What is the main purpose of a Business Continuity Plan in cloud compliance?

5. Which assessment type verifies that controls operate effectively over time?

6. What does CCPA primarily regulate?

7. Which of the following is essential in a cloud vendor contract?

8. What is a primary concern with data sovereignty in cloud computing?

9. What does right to audit provision in a cloud contract typically allow?

10. Which regulation primarily governs the protection of personal data for EU residents?

11. What is the purpose of a Data Processing Agreement (DPA)?

12. Which compliance standard focuses on healthcare data protection?

13. What is the primary focus of SOC 2 Type II compliance?

14. Which of the following is a key component of data residency requirements?

15. What does PCI-DSS primarily regulate?

16. Which cloud model places the most compliance responsibility on the customer?

17. What is the primary purpose of a Service Level Agreement (SLA) in cloud computing?

18. Which regulation applies to publicly traded companies' financial reporting?

19. What does a Business Associate Agreement (BAA) primarily protect?

20. Which framework is most commonly used for cloud security governance?