CCSK Cloud Data Security and Governance

Question 1

According to CCSK, what is the recommended approach for classifying data before moving it to the cloud?

Accepted Answer

Classify data by its sensitivity level and regulatory requirements before migration

Answer

Data should be classified by sensitivity and regulatory requirements before cloud migration to ensure appropriate controls are applied.

Question 2

What is 'data remanence' and why is it a concern in cloud environments?

Accepted Answer

Data that persists on storage media after deletion, potentially exposing residual information

Answer

Data remanence refers to residual data left on storage after deletion, which is a concern in cloud because customers often cannot verify physical media sanitization.

Question 3

Which encryption approach does CCSK recommend to maintain control of data even when stored in a cloud provider's infrastructure?

Accepted Answer

Customer-managed encryption keys (CMEK) where the customer holds the keys

Answer

Using customer-managed encryption keys ensures the customer retains control of data access even if the provider's environment is compromised.

Question 4

What is 'data sovereignty' in the context of CCSK cloud security?

Accepted Answer

The legal principle that data is subject to the laws of the country where it is stored

Answer

Data sovereignty means stored data is governed by the laws and regulations of the jurisdiction where the data physically resides.

Question 5

In CCSK, what is the primary function of a Data Loss Prevention (DLP) tool in cloud environments?

Accepted Answer

To detect and prevent unauthorized transfer or exposure of sensitive data

Answer

DLP tools identify sensitive data and enforce policies to prevent its unauthorized exfiltration or exposure in cloud environments.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK Cloud Data Security and Governance