CISSP Practice Question (Domain 3: Security Architecture and Engineering)
A financial services firm is designing a new system that must meet strict regulatory uptime requirements. The architect proposes a single-cloud provider for simplicity, but the risk team warns of concentration risk. What is the BEST approach?
A. Accept single-cloud risk and negotiate enhanced SLAs with the provider
B. Require a multi-cloud architecture to eliminate provider dependency
C. Evaluate concentration risk against complexity costs and regulatory obligations
D. Implement on-premises failover to maintain independence from cloud providers
Come back for the answer tomorrow, or study more now!
3
22 comments
Vincent Primiani
7
CISSP Practice Question (Domain 3: Security Architecture and Engineering)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by