Crucial Exams

ISC2 Certified Cloud Security Professional (CCSP) Practice Question

During an investigation of suspected insider data theft, an organization's incident response team learns that the virtual machines involved run in a public IaaS environment that automatically terminates unused instances after four hours. Before any evidence is lost, which contractual requirement with the cloud service provider is MOST critical to preserve legally admissible forensic artifacts when such incidents occur?

  • Contractual escrow of customer encryption keys so the provider can decrypt data on demand

  • An SLA guaranteeing 99.99 percent availability for the compute service hosting the workload

  • A right-to-snapshot clause that obligates the provider to create and preserve full VM images and related logs immediately after an incident is reported

  • Quarterly delivery of the provider's SOC 2 Type II attestation report to the customer

ISC2 Certified Cloud Security Professional (CCSP)
Legal, Risk and Compliance
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot