If trust falls short and no compensating controls exist, the organisation must:
ARefund or avoid risk
BReject or accept risk
CRebuild or archive risk
DReport or assign risk
Answer & Solution
Correct answer: B. Reject or accept risk
1. Only two paths remain once controls run out.
2. Either the service goes, or the exposure stays.
3. It must either reject the service or accept a greater degree of risk.
4. So the answer is reject or accept risk.
_Source: NIST SP 800-144, 'Guidelines on Security and Privacy in Public Cloud Computing'_
Keep practising Cloudsecurity
Browse all Cloudsecurity questions for BCA Cloud Computing, or explore more Cloudcomputing topics.