CSCU Cloud Security Fundamentals 3

Question 1

What is data residency in the context of cloud computing?

Accepted Answer

The physical or geographic location where data is stored and processed

Answer

Data residency refers to the geographic location where data is physically stored and processed, which has important implications for regulatory compliance and data sovereignty laws.

Question 2

Which encryption method protects data while it is being transferred to a cloud service?

Accepted Answer

Encryption in transit

Answer

Encryption in transit protects data as it moves between the user's device and the cloud service, typically using protocols like TLS/SSL to prevent interception.

Question 3

What is a cloud access security broker (CASB)?

Accepted Answer

A security tool that sits between cloud users and cloud services to enforce security policies

Answer

A CASB is a security solution that acts as an intermediary between cloud service users and providers, enforcing security policies such as authentication, encryption, and data loss prevention.

Question 4

Why is it important to review cloud service provider compliance certifications before subscribing?

Accepted Answer

To verify the provider meets industry security standards and regulatory requirements

Answer

Compliance certifications (like SOC 2, ISO 27001, or HIPAA) demonstrate that a cloud provider has been independently audited and meets recognized security and privacy standards.

Question 5

What security risk is associated with improper API configuration in cloud services?

Accepted Answer

Unauthorized data access and potential data breaches

Answer

Improperly configured cloud APIs can expose sensitive data or functionality to unauthorized users, creating a significant attack surface for data breaches.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Cloud Security Fundamentals 3