hardMultiple ChoiceObjective-mapped
CCSP Practice Question: During a cloud audit, the auditor finds that the…
During a cloud audit, the auditor finds that the CSP's data deletion process does not meet contractual requirements. The customer's data may still be recoverable after termination. What is the best next step for the customer?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Initiate a remediation plan with defined timelines
When a cloud audit reveals that the CSP's data deletion process does not meet contractual requirements, the customer should initiate a remediation plan with defined timelines to address the issue. This ensures the CSP corrects the deficiency and data is properly deleted. Option B (immediately terminating the contract) may be too drastic and could disrupt operations without solving the immediate data recovery risk. Option C (reporting to regulatory authority) might be appropriate if no remediation occurs, but it is not the first step. Option D (ignoring) is unacceptable as it leaves data at risk.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Initiate a remediation plan with defined timelines
Why this is correct
Working with the CSP to correct the process is the appropriate first step.
- ✗
Immediately terminate the contract with the CSP
Why it's wrong here
Termination may be drastic and not address the existing data.
- ✗
Report the CSP to the regulatory authority
Why it's wrong here
Reporting should be after attempts to remediate.
- ✗
Ignore the finding because it is a minor issue
Why it's wrong here
Ignoring could lead to legal non-compliance.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.