CCSK Cloud Data Security and Governance

Question 1

According to CCSK, what is the recommended approach for classifying data before moving it to the cloud?

Accepted Answer

Classify data by its sensitivity level and regulatory requirements before migration

Answer

Classify data based on cost to store

Answer

Classify data by file size and format only

Answer

Classify data after migration is complete

Question 2

What is 'data remanence' and why is it a concern in cloud environments?

Accepted Answer

Data that persists on storage media after deletion, potentially exposing residual information

Answer

Data that is replicated across multiple cloud regions

Answer

Data that remains encrypted during processing

Answer

Data that is retained for compliance archiving

Question 3

Which encryption approach does CCSK recommend to maintain control of data even when stored in a cloud provider's infrastructure?

Accepted Answer

Customer-managed encryption keys (CMEK) where the customer holds the keys

Answer

Provider-managed encryption with default keys

Answer

No encryption for publicly accessible data

Answer

Encryption only during transmission

Question 4

What is 'data sovereignty' in the context of CCSK cloud security?

Accepted Answer

The legal principle that data is subject to the laws of the country where it is stored

Answer

A cloud provider's right to use customer data for analytics

Answer

A customer's right to delete their data at any time

Answer

The ability to encrypt data across international borders

Question 5

In CCSK, what is the primary function of a Data Loss Prevention (DLP) tool in cloud environments?

Accepted Answer

To detect and prevent unauthorized transfer or exposure of sensitive data

Answer

To back up data to multiple cloud regions

Answer

To encrypt all data stored in the cloud

Answer

To monitor cloud provider uptime and availability

Question 6

What does CCSK recommend as a key control for data stored in object storage (e.g., S3 buckets)?

Accepted Answer

Enable versioning and enforce bucket policies restricting public access

Answer

Leave buckets public by default for performance

Answer

Store all objects without encryption for faster retrieval

Answer

Grant all IAM users read/write access by default