Cloud Security Fundamentals Flashcards

What is data residency in the context of cloud computing?

Answer: The physical or geographic location where data is stored and processed

Data residency refers to the geographic location where data is physically stored and processed, which has important implications for regulatory compliance and data sovereignty laws.

Which encryption method protects data while it is being transferred to a cloud service?

Answer: Encryption in transit

Encryption in transit protects data as it moves between the user's device and the cloud service, typically using protocols like TLS/SSL to prevent interception.

What is a cloud access security broker (CASB)?

Answer: A security tool that sits between cloud users and cloud services to enforce security policies

A CASB is a security solution that acts as an intermediary between cloud service users and providers, enforcing security policies such as authentication, encryption, and data loss prevention.

Why is it important to review cloud service provider compliance certifications before subscribing?

Answer: To verify the provider meets industry security standards and regulatory requirements

Compliance certifications (like SOC 2, ISO 27001, or HIPAA) demonstrate that a cloud provider has been independently audited and meets recognized security and privacy standards.

What security risk is associated with improper API configuration in cloud services?

Answer: Unauthorized data access and potential data breaches

Improperly configured cloud APIs can expose sensitive data or functionality to unauthorized users, creating a significant attack surface for data breaches.

What is the purpose of a cloud exit strategy?

Answer: To define how an organization will migrate data and services away from a cloud provider if needed

A cloud exit strategy outlines the process for migrating data and services from one cloud provider to another or back to on-premises infrastructure, preventing vendor lock-in.