CCSP Cloud Data Security 1 — Questions and Answers
Question 1: Which data security technique ensures that data remains protected even if the storage medium is stolen?
- Data masking
- Encryption at rest (Correct answer)
- Data tokenization
- Data classification
Correct answer: Encryption at rest
Encryption at rest protects data stored on physical media by rendering it unreadable without the correct decryption key.
Question 2: What is the primary purpose of data classification in a cloud environment?
- To reduce storage costs
- To assign appropriate security controls based on sensitivity (Correct answer)
- To compress data for transmission
- To enable faster data retrieval
Correct answer: To assign appropriate security controls based on sensitivity
Data classification categorizes data by sensitivity so that the appropriate security controls can be applied to each category.
Question 3: In cloud data security, what does IRM (Information Rights Management) primarily protect?
- Network packets in transit
- Database connection strings
- Documents and files after they leave the organization (Correct answer)
- Physical hardware in the data center
Correct answer: Documents and files after they leave the organization
IRM enforces usage policies on documents and files so that access controls follow the content even outside the organization's perimeter.
Question 4: Which technique replaces sensitive data with a non-sensitive substitute that retains the format but has no exploitable value?
- Hashing
- Tokenization (Correct answer)
- Steganography
- Key stretching
Correct answer: Tokenization
Tokenization substitutes sensitive data values with random tokens that are meaningless to an attacker but can be reverse-mapped via a secure vault.
Question 5: What is data sovereignty in the context of cloud storage?
- The cloud provider's right to audit stored data
- The principle that data is subject to the laws of the country in which it is stored (Correct answer)
- Encrypting data before uploading to a cloud provider
- Automatic replication of data across multiple regions
Correct answer: The principle that data is subject to the laws of the country in which it is stored
Data sovereignty means that stored data is governed by the legal jurisdiction of the country where the physical storage resides.
Question 6: Which CCSP domain specifically addresses the security of data stored, processed, and transmitted in the cloud?
- Cloud Platform and Infrastructure Security
- Cloud Application Security
- Cloud Data Security (Correct answer)
- Legal, Risk, and Compliance
Correct answer: Cloud Data Security
Cloud Data Security is Domain 2 of the CCSP CBK and focuses on data lifecycle management, storage, retention, and protection.
CCSP Cloud Data Security 1
Which data security technique ensures that data remains protected even if the storage medium is stolen?