Data Security in Cloud CCSE Practice Questions (Page 11)

Questions 51–53

1. 51application · medium

   A company has a shared object storage bucket used by multiple teams. The security team wants to ensure that each team can only access its own project files, and that all access is logged. What should be implemented?

   • AGrant all teams full access to the bucket and enable logging.
   • BMake the bucket public and rely on the teams to follow naming conventions.
   • CCreate a separate bucket for each team and grant each team full access to its bucket.
   • DUse folder-level permissions with IAM roles that restrict each team to its own folder, and enable access logging.
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A company stores sensitive customer data in a cloud database. The security team wants to ensure that data is protected both when stored and when transmitted between the application and the database. Which combination of controls should be used?

   • AUse a VPN for all connections and disable encryption at rest.
   • BEnable TLS for connections and use server-side encryption for the database.
   • CEnable database auditing and rely on network firewalls.
   • DUse client-side encryption only for data at rest.
   Reveal Solution Discussion Select an answer first
3. 53foundation · easy

   What is the purpose of enabling encryption on a cloud storage service?

   • ATo reduce storage costs
   • BTo protect data confidentiality at rest
   • CTo improve data transfer speeds
   • DTo enable data sharing with external users
   Reveal Solution Discussion Select an answer first