ccsp-2

In which of these options does the encryption engine reside within the application accessing the database?

• A. Transparent encryption

• B. Symmetric-key encryption

• C. Application-level encryption

• D. Homomorphic encryption

You are the security team leader for an organization that has an infrastructure as a service (IaaS) production environment hosted by a cloud provider. You want to implement an event monitoring (security information and event management [SIEM]/security information management [SIM]/security event management [SEM]) solution in your production environment in order to acquire better data for security defenses and decisions. Which of the following is probably your most significant concern about implementing this solution in the cloud?

• A. The solution should give you better analysis capability by automating a great deal of the associated tasks.

• B. Dashboards produced by the tool are a flawless management benefit.

• C. You will have to coordinate with the cloud provider to ensure that the tool is acceptable and functioning properly.

• D. Senior management will be required to approve the acquisition and implementation of the tool.

Which of the following is not a step in the crypto-shredding process? t

• A. Encrypt data with a particular encryption engine.

• B. Encrypt first resulting keys with another encryption engine.

• C. Save backup of second resulting keys.

• D. Destroy original second resulting keys.

Which of the following sanitization methods is feasible for use in the cloud?

• A. Crypto-shredding

• B. Degaussing

• C. Physical destruction

• D. Overwriting

Which of the following is not a method for enhancing data portability? t

• A. Crypto-shredding

• B. Using standard data formats

• C. Avoiding proprietary services

• D. Favorable contract terms

When implementing cryptography in a cloud environment, where is the worst place to store the keys?

• A. With the cloud provider

• B. Off the cloud, with the data owner

• C. With a third-party provider, in key escrow

• D. Anywhere but with the cloud provider

Which of the following is not a security concern related to archiving data for long-term t storage?

• A. Long-term storage of the related cryptographic keys

• B. Format of the data

• C. Media the data resides on

• D. Underground depth of the storage facility

Data dispersion is a cloud data security technique that is most similar to which legacy implementation?

• A. Business continuity and disaster recovery (BC/DR)

• B. Redundant Array of Inexpensive Disks (RAID)

• C. Software-defined networking (SDN)

• D. Content delivery network (CDN)

Data dispersion uses , where the traditional implementation is called “striping.”

• A. Chunking

• B. Vaulting

• C. Lumping

• D. Grouping

Data dispersion uses_____ , where the traditional implementation is called “parity bits.”

• A. Smurfing

• B. Snarfing

• C. Erasure coding

• D. Real-time bitlinking