CCSP Cloud Data Security

Question 1

Which data security technique ensures that data remains protected even if the storage medium is stolen?

Accepted Answer

Encryption at rest

Answer

Data masking

Answer

Data tokenization

Answer

Data classification

Question 2

What is the primary purpose of data classification in a cloud environment?

Accepted Answer

To assign appropriate security controls based on sensitivity

Answer

To reduce storage costs

Answer

To compress data for transmission

Answer

To enable faster data retrieval

Question 3

In cloud data security, what does IRM (Information Rights Management) primarily protect?

Accepted Answer

Documents and files after they leave the organization

Answer

Network packets in transit

Answer

Database connection strings

Answer

Physical hardware in the data center

Question 4

Which technique replaces sensitive data with a non-sensitive substitute that retains the format but has no exploitable value?

Accepted Answer

Tokenization

Answer

Hashing

Answer

Steganography

Answer

Key stretching

Question 5

What is data sovereignty in the context of cloud storage?

Accepted Answer

The principle that data is subject to the laws of the country in which it is stored

Answer

The cloud provider's right to audit stored data

Answer

Encrypting data before uploading to a cloud provider

Answer

Automatic replication of data across multiple regions

Question 6

Which CCSP domain specifically addresses the security of data stored, processed, and transmitted in the cloud?

Accepted Answer

Cloud Data Security

Answer

Cloud Platform and Infrastructure Security

Answer

Cloud Application Security

Answer

Legal, Risk, and Compliance