CompTIA Cloud+ Practice Test

What document outlines a company's responsibilities for deploying servers safely in the public cloud?

1. DIACAP

2. Security policy

3. Service level agreement

4. SOC 2

The correct answer is: Security policy

The choice of a security policy as the correct answer is appropriate as this document specifically outlines a company's responsibilities and protocols for maintaining security when deploying servers in a public cloud environment. It establishes the guidelines and procedures that aim to protect sensitive data and ensure compliance with regulatory requirements. A security policy generally includes assessments of risks, requirements for access controls, incident response strategies, and outlines the measures necessary to safeguard information from unauthorized access or breaches during deployment and operation in the cloud. Other documents listed, while related to security and compliance, serve different purposes. A service level agreement focuses primarily on the specifics of service performance and expectations between service providers and customers, rather than detailing security responsibilities alone. SOC 2 refers to a set of standards for managing customer data based on five "trust service principles," which are crucial for a service organization but do not directly specify internal company responsibilities. DIACAP is a framework for managing risk in defense-in-depth systems and isn’t tailored for cloud deployment security specifically, making the security policy the most fitting document for outlining responsibilities in this context.