What does 'data remanence' refer to in cloud storage?

Data that is backed up to multiple regions

Residual data remaining after deletion attempts

Data that is actively being accessed

A company is using a cloud-based file storage service to share project files with external contractors. The security team needs to ensure that contractors can only access the files they are assigned to, and that they cannot list or access other files in the same storage location. Which access control model should be implemented?

Provide each contractor with the storage account key.

Store all files in a single container and use folder-level permissions to restrict access.

Use a shared access signature (SAS) token with read-only permissions for each contractor.

Create a separate storage container for each contractor and assign them a SAS token with permissions only to that container.

Which security control is most effective in mitigating the risk of unauthorized access to cloud data?

Using a longer storage retention policy

Enabling logging on the storage account

Regularly backing up data to another region

Implementing strong encryption for data at rest

A company is using a cloud-based object storage service to store sensitive data. The security team needs to ensure that the data is encrypted at rest. The cloud provider offers server-side encryption with provider-managed keys, server-side encryption with customer-managed keys, and client-side encryption. Which option provides the strongest security and control?

Server-side encryption with customer-managed keys.

All options provide the same level of security.

Server-side encryption with provider-managed keys.

CompTIASecurityX (CASP+)

Domain 2Objective 2

Cloud Data Security CAS-005 Practice Questions (Page 4)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

5concepts

27%of the exam

Questions 16–20

16foundation · easy
What does 'data remanence' refer to in cloud storage?
Select an answer first
17application · medium
A company is using a cloud-based file storage service to share project files with external contractors. The security team needs to ensure that contractors can only access the files they are assigned to, and that they cannot list or access other files in the same storage location. Which access control model should be implemented?
Select an answer first
18foundation · easy
Which security control is most effective in mitigating the risk of unauthorized access to cloud data?
Select an answer first
19application · medium
A company is using a cloud-based object storage service to store sensitive data. The security team needs to ensure that the data is encrypted at rest. The cloud provider offers server-side encryption with provider-managed keys, server-side encryption with customer-managed keys, and client-side encryption. Which option provides the strongest security and control?
Select an answer first
20foundation · easy
Which of the following is the most direct risk of unauthorized access to cloud data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Cloud Data Security CAS-005 Practice Questions (Page 4)

Questions 16–20

What does 'data remanence' refer to in cloud storage?

Which security control is most effective in mitigating the risk of unauthorized access to cloud data?

Which of the following is the most direct risk of unauthorized access to cloud data?

Keep studying — Security architecture