Why is regular encryption key rotation important in cloud environments?

To limit the impact of a key compromise

To simplify user access management

To increase data storage capacity

A multinational company is moving its data to a cloud provider. The security team is concerned about data leakage through the cloud provider's support staff. The company's compliance team requires that the cloud provider cannot access the plaintext data. Which encryption approach should be implemented?

Use server-side encryption with a customer-managed key stored in the cloud provider's KMS.

Use client-side encryption with keys managed entirely by the company on-premises.

Use a cloud HSM to store the keys and enable server-side encryption.

Use server-side encryption with a provider-managed key.

A company is using a cloud provider's object storage to archive sensitive data. The data is encrypted with a customer-managed key. The company is required to ensure that if the data is ever deleted, it cannot be recovered. Which combination of actions best meets this requirement?

Enable object versioning and set a lifecycle policy to permanently delete old versions after 30 days.

Move the data to a cold storage tier and then delete it.

Use a multi-factor authentication (MFA) delete protection feature on the storage bucket.

Delete the customer-managed key and then delete the data.

What is a best practice for securing cloud storage?

Using shared access keys for all users

Enabling encryption for data at rest

Granting public read access to all buckets

CompTIASecurityX (CASP+)

Domain 2Objective 2

Cloud Data Security CAS-005 Practice Questions (Page 3)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

5concepts

27%of the exam

Questions 11–15

11foundation · easy
Why is regular encryption key rotation important in cloud environments?
Select an answer first
12expert · hard
A multinational company is moving its data to a cloud provider. The security team is concerned about data leakage through the cloud provider's support staff. The company's compliance team requires that the cloud provider cannot access the plaintext data. Which encryption approach should be implemented?
Select an answer first
13foundation · easy
Which method is most effective in ensuring data is completely removed from cloud storage?
Select an answer first
14expert · hard
A company is using a cloud provider's object storage to archive sensitive data. The data is encrypted with a customer-managed key. The company is required to ensure that if the data is ever deleted, it cannot be recovered. Which combination of actions best meets this requirement?
Select an answer first
15foundation · easy
What is a best practice for securing cloud storage?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Cloud Data Security CAS-005 Practice Questions (Page 3)

Questions 11–15

Why is regular encryption key rotation important in cloud environments?

Which method is most effective in ensuring data is completely removed from cloud storage?

A company is using a cloud provider's object storage to archive sensitive data. The data is encrypted with a customer-managed key. The company is required to ensure that if the data is ever deleted, it cannot be recovered. Which combination of actions best meets this requirement?

What is a best practice for securing cloud storage?

Keep studying — Security architecture