Fully controlled and managed by the cloud service provider?

• A. Inherited Controls
• B. Shared Controls
• C. Customer/Client Specific Controls
• D. Internal Clients

Answer: (A)

This question tests how security responsibilities are allocated in the cloud. In cloud models, some controls are provided and fully managed by the cloud service provider, so you effectively “inherit” them by using the service. These are called inherited controls. Examples include the provider’s physical security of data centers, the baseline security of the underlying infrastructure, and other platform-level protections that come standard with the service offering. You don’t configure or maintain these yourself; the provider handles them as part of the service. Shared controls would involve both parties sharing responsibility, and customer-specific controls are managed by you to protect your data and configurations. Internal clients isn’t a recognized control category in this context.