1. Home
2. All questions
3. Question 221

CISSP study material · question 221 of 500

An auditor argues a cloud cannot be private because the hardware is owned and operated by an outside supplier in the supplier's own datacentre. What does the NIST definition say?

• Security architecture

1. A private cloud must sit on the consuming organisation's premises.
2. A private cloud is defined by exclusive use by one organisation; it may be owned, managed and hosted by a third party off premises.
3. A private cloud is defined by having no shared physical resources at any layer.
4. A private cloud must be owned and operated by the consuming organisation.

Challenge yourself on this topic → Study as cards