CCSK Cloud Data Security and Governance 2

Question 1

What is 'tokenization' and how does it differ from encryption in cloud data protection?

Accepted Answer

Tokenization replaces sensitive data with a non-sensitive placeholder; encryption transforms data using a mathematical algorithm and key

Answer

Tokenization substitutes sensitive data with a token that has no intrinsic value, while encryption transforms data mathematically and can be reversed with the key.

Question 2

Which CCSK concept describes ensuring data integrity throughout its lifecycle in the cloud?

Accepted Answer

Data lineage

Answer

Data lineage tracks how data moves, transforms, and is used throughout its lifecycle, ensuring accountability and integrity verification.

Question 3

What is a 'cloud access security broker' (CASB) primarily used for?

Accepted Answer

Enforcing security policies between cloud users and cloud services

Answer

A CASB sits between users and cloud services to enforce security policies including visibility, compliance, data security, and threat protection.

Question 4

According to CCSK, what should organizations do before terminating a cloud provider contract to address data security?

Accepted Answer

Ensure all data is exported, verify deletion by the provider, and obtain written confirmation

Answer

Before contract termination, organizations should export all data, confirm its deletion from provider systems, and obtain written assurance of secure disposal.

Question 5

What is the role of metadata in cloud data governance according to CCSK?

Accepted Answer

Metadata describes data attributes enabling classification, discovery, and access control decisions

Answer

Metadata describes data characteristics (type, owner, sensitivity) and enables automated classification, discovery, and enforcement of governance policies.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK Cloud Data Security and Governance 2