When defining responsibilities with a cloud computing vendor, which of the following should be regarded as a shared responsibility between user and provider?

A. Data ownership
B. Access log review
C. Application logging
D. Incident response