Cloud Data Security Flashcards
6 cards from real CCSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Cloud Data Security flashcards as text
Which phase of the Cloud Data Lifecycle involves permanently destroying data so it cannot be recovered?
Answer: Destroy
The Destroy phase of the cloud data lifecycle ensures data is rendered irretrievable using methods like cryptographic erasure or physical destruction.
Cryptographic erasure (crypto-shredding) destroys data by doing what?
Answer: Deleting the encryption key so encrypted data becomes permanently inaccessible
Crypto-shredding deletes the encryption key, making encrypted data permanently unreadable without needing to overwrite or physically destroy the media.
A cloud customer wants to ensure their data is never stored outside a specific geographic region. Which control best addresses this requirement?
Answer: Contractual data residency clause with the CSP
A contractual data residency clause legally obligates the cloud service provider to keep customer data within the specified geographic boundary.
What is the primary risk of using the same encryption key for a long period without rotation?
Answer: Increased probability of key compromise and greater exposure of encrypted data
Prolonged use of a single key increases both the window of exposure and the volume of data at risk if the key is ever compromised.
Which data masking technique permanently alters production data for use in non-production environments?
Answer: Static masking
Static data masking creates a sanitized copy of the data at rest, permanently replacing sensitive values for use in development or testing.
Under GDPR, what is the right of erasure also commonly called?
Answer: Right to be forgotten
GDPR Article 17 grants individuals the 'right to be forgotten,' requiring organizations to delete personal data upon request under certain conditions.