topic Re: CCSP - why is my answer incorrect? in Tech Talk

CCSP - why is my answer incorrect?

Spirnia — Thu, 01 May 2025 21:18:34 GMT

I don’t understand why my answer is incorrect.

I feel the question has two correct answers.

Please advise!

Re: CCSP - why is my answer incorrect?

Spirnia — Thu, 01 May 2025 21:33:06 GMT

Actually, I feel all four answers are correct according to my understanding of the lesson:

Re: CCSP - why is my answer incorrect?

nkeaton — Fri, 02 May 2025 02:54:06 GMT

@Spirnia I would be curious where the question came from. A CSP is a Cloud Service Provider. I have not seen Partner as a term for CSP. Partner to me implies maybe a reciprocal agreement but not sure of the intent. A CSP has the facility, infrastructure, hardware, network, etc for customer xAAS service models. Unless it is in the SLA which have not seen on any that I have worked on, a CSP would not be doing traditional audits. One of the deficiencies of having systems and/or data in a CSP is the inability to do traditional auditing. I will look and see if I can find any references to Partner but have not seen that before (yet).

Re: CCSP - why is my answer incorrect?

Spirnia — Fri, 02 May 2025 03:29:01 GMT

The question is from the CCSP official online curriculum.

And I also posted the lesson.

Please look over the lesson, as it includes audits too.

ChatGPT helped me better understand the nuance in the question.

I think the question excludes strategic planning and governance and includes only operational.

That could be one reason for the other three answers being incorrect.

Re: CCSP - why is my answer incorrect?

nkeaton — Fri, 02 May 2025 03:46:51 GMT

@Spirnia Thank you. Never seen that terminology until now. It has been a long time since my CCSP and CCSK. I will look further. So does it say somewhere that CSP has 2 definitions as an acronym?

Re: CCSP - why is my answer incorrect?

Spirnia — Fri, 02 May 2025 04:09:19 GMT

Cloud Service Partner is ISO terminology.

Re: CCSP - why is my answer incorrect?

nkeaton — Fri, 02 May 2025 04:29:55 GMT

@Spirnia Thank you. That explains it then. I am very familiar with NIST and have some knowledge of other frameworks as part of governance. We definitely don’t use ISO. They are really expensive for one while NIST is no cost. For the acronym CSP, are they showing 2 definitions then?

Re: CCSP - why is my answer incorrect?

Spirnia — Fri, 02 May 2025 04:56:11 GMT

It looks to me, from my research, that ISO uses the acronym CSN for Cloud Service Partner.

Re: CCSP - why is my answer incorrect?

nkeaton — Fri, 02 May 2025 05:38:08 GMT

@Spirnia Thank you. Even more interesting.

Re: CCSP - why is my answer incorrect?

Steve-Wilme — Fri, 02 May 2025 09:05:02 GMT

I suspect the clue in the context in which the question is asked.

Service Delivery and Management, probably doesn't involve assessing the marketplace for services; that'd be a marketing function in most organisations.

Additionally CSPs typically use external auditors and audit is a function of service delivery, as it needs to be independent.

Re: CCSP - why is my answer incorrect?

Spirnia — Fri, 02 May 2025 09:27:56 GMT

You confirmed for me what ChatGPT also noted!

The last few words in the question are the key to choosing the correct answer.

I found this question to be very tricky.

Thank you again!

Re: CCSP - why is my answer incorrect?

nkeaton — Fri, 02 May 2025 12:43:18 GMT

@Steve-Wilme Very nice. Just a note for you. The former concentrations are now independent certifications. I passed the ISSEP right after the change. I have talked with ISC2 after seeing how some of their folks put their certifications. So for you it would be ISSAP, ISSMP, CISSP. People can now take them without a CISSP but need 7 years of experience. I am studying for the ISSAP. Architecture is my weakest discipline of the 3 but earned the other 2 and thought would like to attempt the triad. Best wishes, I just don’t think that they advertised the changes well. Congratulations on your achievements.

Re: CCSP - why is my answer incorrect?

ocbern5 — Fri, 02 May 2025 13:54:59 GMT

I do not think CSPs are responsible for performing audits for customers as part of their normal service delivery, maybe they perform audits just for their/CSPs services/components.

Re: CCSP - why is my answer incorrect?

akkem — Fri, 02 May 2025 15:40:03 GMT

These tests are from a third party, and we're unsure about their reliability. I’ve been following the Udemy course and noticed that around 10% of the questions have incorrect answers, with no explanation provided for the chosen options. I strongly recommend doing your own research on each specific topic to ensure accuracy and deeper understanding.

Re: CCSP - why is my answer incorrect?

Spirnia — Fri, 02 May 2025 15:48:42 GMT

This question is from the official ISC2 online curriculum.

It is not thirdy party.

Re: CCSP - why is my answer incorrect?

akkem — Fri, 02 May 2025 15:55:57 GMT

Mybad, I thought it was from thrid-party.