Cloud Compliance Frameworks & Governance Quiz

Submit

2. Which control type focuses on preventing unauthorized access to cloud resources?

Detective control

Preventive control

Corrective control

Compensating control

Submit

4. What is the primary benefit of implementing a Compliance Management System (CMS)?

To eliminate regulatory requirements

To centralize and automate compliance monitoring and reporting

To transfer compliance responsibility to auditors

To reduce the need for security controls

5. True or False: Cloud service providers are required to maintain the same compliance certifications across all global data centers.

True

False

6. Which regulation specifically addresses breach notification requirements?

GDPR

HIPAA Breach Notification Rule

State Privacy Laws

All of the above

Submit

8. What does a Compliance Gap Assessment identify?

Differences between current and required compliance states

Cloud provider pricing gaps

Employee training needs only

Hardware configuration differences

9. True or False: Encryption at rest is sufficient to meet all cloud security compliance requirements.

True

False

10. Which framework provides guidelines for cybersecurity standards developed by NIST?

Cybersecurity Framework

Risk Management Framework

Special Publications (SP 800 series)

All of the above

11. Which regulation primarily governs the protection of personal data for EU residents?

HIPAA

GDPR

SOC 2

PCI-DSS

12. What is the primary goal of Business Continuity Planning (BCP) in cloud governance?

To reduce operational costs

To ensure organizational resilience during disruptions

To eliminate all business interruptions

To transfer all risk to the cloud provider

13. True or False: Data residency requirements mandate that data must be stored in specific geographic locations.

True

False

14. Which of the following is a key principle of the shared responsibility model in cloud computing?

The cloud provider is responsible for all security

The customer is responsible for all security

Security responsibilities are divided between provider and customer

Security is optional in cloud environments

Submit

16. What does PCI-DSS primarily protect?

Patient health information

Payment card data

Government classified information

Intellectual property rights

17. True or False: SOC 2 Type II audits evaluate controls over a minimum 6-month period.

True

False

18. Which framework focuses on controls for financial reporting and operational effectiveness?

COSO

ITIL

NIST

ISO 9001

Submit

20. What is the primary purpose of a Risk Assessment in cloud governance?

To eliminate all organizational risk

To identify, analyze, and prioritize potential threats and vulnerabilities

To determine cloud service provider pricing

To replace security controls entirely

Cloud Essentials+ Regulatory Compliance Frameworks Overview Quiz

1. Compliance auditing in cloud environments typically includes ____.

2.

What first name or nickname would you like us to use?

2. Which control type focuses on preventing unauthorized access to cloud resources?

3. Data classification in cloud governance typically includes categories such as ____.

4. What is the primary benefit of implementing a Compliance Management System (CMS)?

5. True or False: Cloud service providers are required to maintain the same compliance certifications across all global data centers.

6. Which regulation specifically addresses breach notification requirements?

7. Identity and Access Management (IAM) controls are essential for implementing the principle of ____.

8. What does a Compliance Gap Assessment identify?

9. True or False: Encryption at rest is sufficient to meet all cloud security compliance requirements.

10. Which framework provides guidelines for cybersecurity standards developed by NIST?

11. Which regulation primarily governs the protection of personal data for EU residents?

12. What is the primary goal of Business Continuity Planning (BCP) in cloud governance?

13. True or False: Data residency requirements mandate that data must be stored in specific geographic locations.

14. Which of the following is a key principle of the shared responsibility model in cloud computing?

15. ISO 27001 is an international standard for ____.

16. What does PCI-DSS primarily protect?

17. True or False: SOC 2 Type II audits evaluate controls over a minimum 6-month period.

18. Which framework focuses on controls for financial reporting and operational effectiveness?

19. HIPAA compliance is primarily required for organizations handling ____.

20. What is the primary purpose of a Risk Assessment in cloud governance?