CCSP Cloud Data Security 3

Question 1

Which cloud storage type is best suited for unstructured data such as images, videos, and backups?

Accepted Answer

Object storage

Answer

Object storage is designed for unstructured data, storing items as objects with metadata and a unique identifier rather than in a hierarchical file system.

Question 2

What does a Data Loss Prevention (DLP) solution primarily do in a cloud environment?

Accepted Answer

Monitors and controls the movement of sensitive data to prevent unauthorized exfiltration

Answer

DLP solutions inspect and control data flows to detect and prevent the unauthorized transmission of sensitive information outside authorized boundaries.

Question 3

In the context of cloud data security, what is a data custodian responsible for?

Accepted Answer

Implementing and managing the technical security controls that protect data

Answer

The data custodian is responsible for the day-to-day management and technical protection of data as specified by the data owner.

Question 4

Which standard specifically provides guidance on personally identifiable information (PII) protection in public clouds?

Accepted Answer

ISO/IEC 27018

Answer

ISO/IEC 27018 is the code of practice specifically for protection of PII in public cloud computing environments.

Question 5

What is the key advantage of client-side encryption over server-side encryption in cloud storage?

Accepted Answer

The cloud provider never has access to the plaintext data or encryption keys

Answer

With client-side encryption, data is encrypted before it leaves the customer's environment, so the cloud provider can only ever see ciphertext.

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP Cloud Data Security 3