CCSP Cloud Data Security 2

Question 1

Which phase of the Cloud Data Lifecycle involves permanently destroying data so it cannot be recovered?

Accepted Answer

Destroy

Answer

The Destroy phase of the cloud data lifecycle ensures data is rendered irretrievable using methods like cryptographic erasure or physical destruction.

Question 2

Cryptographic erasure (crypto-shredding) destroys data by doing what?

Accepted Answer

Deleting the encryption key so encrypted data becomes permanently inaccessible

Answer

Crypto-shredding deletes the encryption key, making encrypted data permanently unreadable without needing to overwrite or physically destroy the media.

Question 3

A cloud customer wants to ensure their data is never stored outside a specific geographic region. Which control best addresses this requirement?

Accepted Answer

Contractual data residency clause with the CSP

Answer

A contractual data residency clause legally obligates the cloud service provider to keep customer data within the specified geographic boundary.

Question 4

What is the primary risk of using the same encryption key for a long period without rotation?

Accepted Answer

Increased probability of key compromise and greater exposure of encrypted data

Answer

Prolonged use of a single key increases both the window of exposure and the volume of data at risk if the key is ever compromised.

Question 5

Which data masking technique permanently alters production data for use in non-production environments?

Accepted Answer

Static masking

Answer

Static data masking creates a sanitized copy of the data at rest, permanently replacing sensitive values for use in development or testing.

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP Cloud Data Security 2