Exam SY0-501 topic 1 question 885 discussion

Clear as mud! All except D could be the correct answer.

The correct answer would be B. The security concerns for hosting a web application and database in the cloud include the risk of the cloud vendor becoming a new attack vector within the supply chain. By using a cloud vendor, the organization is effectively outsourcing a part of its infrastructure, which means that it is relying on the vendor's security controls and policies. The organization must ensure that the cloud vendor has implemented adequate security measures to protect its systems and data. Other security concerns for cloud-hosted web applications and databases include data privacy, compliance, data backup, and disaster recovery.

B. The cloud vendor is a new attack vector within the supply chain.

The answer is B, I just took an exam with this question and it was right.

Yes the best answer is A because some cloud service provider do not give two factor authentication and this leads data breach

Still not sure about the answer. Comptia is so rubbish with writing questions.

Wish someone can effectively explain this answer :/ Or at least point to which study tool can explain this concept better

An organization decided to host in the cloud. What drove them to such a decision. One answer.

If you chose A or B, you definitely have no clue about how the cloud works. C. Outsourcing code development is a more legitimate concern, as they may not have the same levels of control as with the in-house/on-prem dev cycles.

i dont understand this question

A is definitely the correct answer. B and C will transfer the risk to the Vendor which should not be the company concern. EOL on D might be a concerned but the risk is minimal.

I think exposure to other people could be a major concern. Answer A