ISC2 Certified Cloud Security Professional (CCSP) Practice Question

A community cloud is provisioned for exclusive use by a specific community of consumers from organizations that have shared concerns such as mission, security requirements, or regulatory considerations. In this scenario, the environment will be limited to hospitals and insurance companies that all fall under the same HIPAA compliance obligations, making a community cloud the most appropriate choice.

A public cloud would allow unrelated tenants, violating the exclusivity requirement. A private cloud would remain dedicated to a single organization and would not provide a shared environment for the consortium. A hybrid cloud blends two or more different deployment models but still would not ensure that only the defined community has access. A multi-cloud strategy refers to using several distinct clouds and does not by itself enforce the shared-concern residency demanded here.