Free CompTIA Security+ SY0-701 Practice Question

The cloud provider's responsibility matrix outlines the division of security responsibilities between the provider and the customer. It specifies which security controls are managed by the provider and which are the customer's responsibility. The service level agreement (SLA) typically covers performance metrics like uptime and availability, not the specifics of security responsibilities. The incident response plan details how incidents are managed but doesn't define the division of security controls. The company's internal policies are important but do not inform them of the provider's responsibilities.