CompTIA Security Plus Mock Test Q856

Which of the following would be MOST appropriate if an organization’s requirements mandate complete control over the data and applications stored in the cloud?

A. Hybrid cloud
B. Community cloud
C. Private cloud
D. Public cloud

Correct Answer: C
Section: Application, Data and Host Security

Explanation:
A private cloud is a cloud service for internal use only and is located within a corporate network rather than on the Internet. It is usually owned, managed, and operated by the
company, which gives the company full control over the data and applications stored in the cloud.

Incorrect Answers:
A: A hybrid cloud is a mixture of private and public cloud components. In a private cloud the company would have control over the data and applications in the cloud but not on the
private cloud where they will only have control over their own data.
B: A community cloud is a cloud environment maintained, used, and paid for by a group of users or organizations for their shared benefit, such as collaboration and data exchange.
This may allow for some cost savings versus accessing private or public clouds independently.
D: A public cloud is a cloud service that is accessible to the general public, typically over an Internet connection. It services usually requires some form of subscription or payment.
Consumers only have control over their own data on the cloud.

References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 36, 37
Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, pp. 200-201