CCSP Cloud Data Security

Question 1

Which data security technique ensures that data remains protected even if the storage medium is stolen?

Accepted Answer

Encryption at rest

Answer

Encryption at rest protects data stored on physical media by rendering it unreadable without the correct decryption key.

Question 2

What is the primary purpose of data classification in a cloud environment?

Accepted Answer

To assign appropriate security controls based on sensitivity

Answer

Data classification categorizes data by sensitivity so that the appropriate security controls can be applied to each category.

Question 3

In cloud data security, what does IRM (Information Rights Management) primarily protect?

Accepted Answer

Documents and files after they leave the organization

Answer

IRM enforces usage policies on documents and files so that access controls follow the content even outside the organization's perimeter.

Question 4

Which technique replaces sensitive data with a non-sensitive substitute that retains the format but has no exploitable value?

Accepted Answer

Tokenization

Answer

Tokenization substitutes sensitive data values with random tokens that are meaningless to an attacker but can be reverse-mapped via a secure vault.

Question 5

What is data sovereignty in the context of cloud storage?

Accepted Answer

The principle that data is subject to the laws of the country in which it is stored

Answer

Data sovereignty means that stored data is governed by the legal jurisdiction of the country where the physical storage resides.

CCSP - Certified Cloud Security Professional Exam Practice Test