ISC2 Certified Cloud Security Professional (CCSP) Practice Question

ISO/IEC 17788 and the NIST Cloud Computing Reference Architecture both define a cloud service broker as a third-party that manages the use, performance, and delivery of cloud services and negotiates relationships between cloud service customers and cloud service providers. In the scenario, the consultancy's primary tasks-evaluating multiple providers, negotiating SLAs, integrating identity, and offering a unified portal-match these broker responsibilities. A cloud service customer is the financial firm consuming the services, not the intermediary. A cloud service provider would own and operate the infrastructure, which the consultancy does not. A cloud service auditor performs independent assessments rather than brokering or integrating services.