Question 34
Domain 1: Cloud Architecture, Governance, and Risk ManagementAn organization stores data in a cloud service where the physical servers are located in multiple countries. Which legal issue is of GREATEST concern?
Correct answer: A
Explanation
Data sovereignty is the main issue because data stored on servers in multiple countries is subject to the laws of each location. Foreign governments may compel access under local legal authority, creating risk that the organization’s data is governed by laws outside its home jurisdiction.
Why each option is right or wrong
A. Data sovereignty and the potential for foreign governments to access data under local laws
When cloud infrastructure is distributed across multiple jurisdictions, the controlling legal regimes are the data-protection and government-access laws of each country where the servers sit, not just the organization’s home law. For example, the EU GDPR (Art. 3 and Chapter V) and national surveillance or disclosure statutes can apply extraterritorially or compel provider access, so the principal risk is that a foreign authority may lawfully obtain the data under its own legal process.
B. The color of the data center buildings
C. The speed of light limitations
D. The provider's logo design