Exam CCAK topic 1 question 179 discussion

In the context of cloud operationalization, the phrase "below the waterline" typically refers to the aspects of cloud operations that are not directly visible to the customer but are instead managed by the cloud service provider. This can include infrastructure management, physical security, and other backend operations. Therefore, the correct choice is: **D. The controls operated by the cloud service provider** These are the controls and operations that the cloud service provider is responsible for, which the customer does not directly manage or see, similar to how the parts of an iceberg below the waterline are not visible.

CCAK P# 150, 159 The cloud metastructure, as defined in CSA Guidance V4, includes “the protocols and mechanisms that provide the interface between the infrastructure layer and the other layers. The glue that ties the technologies and enables management and configuration.” It includes the management plane components, which are network-enabled and remotely accessible. This waterline in the shared responsibility model defines where the CSP duties end and the consumer’s begin. Destruction methods—Data destruction requirements will change after cloud adoption. Without access below the waterline, degaussing or physical destruction are not valid options, and multipass wipes may prove inefficient or ineffective.