An organization wants to use a public cloud provider for IaaS instances. They will develop and deploy their own
applications within these instances. The organization must follow health care compliance regulations.
What should the organization ensure before deploying their applications in the public cloud?

A.
Instances will not be placed in more than one availability zone

B.
Auditors have access to the cloud provider’s data encryption keys

C.
Cloud provider supplies data-in-transit encryption capabilities

D.
Cloud provider supplies proper controls and audits for compliance requirements

Explanation: