Câu 15: CCAK: Certificate of Cloud Auditing Knowledge

While performing the audit, the auditor found that an object storage bucket containing PII could be accessed by anyone on the Internet. Given this discovery, what should be the most appropriate action for the auditor to perform?

1. A. Highlighting the gap to the audit sponsor at the sponsor’s earliest possible availability
2. B. Asking the organization’s cloud administrator to immediately close the gap by updating the configuration settings and making the object storage bucket private and hence inaccessible from the Internet — đáp án hiện tại
3. C. Documenting the finding in the audit report and sharing the gap with the relevant stakeholders
4. D. Informing the organization’s internal audit manager immediately about the gap