Data Security in Cloud CCSE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a common data masking technique?

   • ASubstitution
   • BHashing
   • CTokenization
   • DCompression
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A payment processing company stores credit card numbers in a database. To reduce the scope of PCI DSS compliance, the company wants to ensure that the actual card numbers are not stored in its environment. However, the company needs to process transactions and perform analytics on transaction patterns. Which approach should be used?

   • ATokenize the card numbers and store only the tokens, with the actual card numbers held by a third-party token service
   • BMask the card numbers by showing only the last four digits in the database
   • CEncrypt the card numbers with a strong encryption algorithm and store the key in the same database
   • DHash the card numbers and store the hash values
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security analyst notices unusual access patterns to a cloud storage bucket containing sensitive data. The analyst needs to determine who accessed the data, from which IP address, and what actions were performed. Which configuration should be enabled?

   • AConfigure a network security group on the storage account
   • BEnable encryption on the bucket
   • CEnable server access logging on the bucket
   • DEnable versioning on the bucket
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A global company must comply with data residency laws that require customer data to remain in the country where the customer resides. The company uses a cloud provider with regions in multiple countries. What is the most effective way to ensure compliance?

   • AStore all customer data in a single region and rely on the cloud provider's compliance certifications.
   • BUse a private cloud hosted in the company's headquarters country for all customer data.
   • CEncrypt all customer data and store it in any region, as encryption satisfies residency requirements.
   • DClassify customer data by country and store each country's data in a region located in that country.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is a common regulatory requirement related to data residency?

   • AAll data must be encrypted with the same algorithm
   • BData must be accessible to the public
   • CData must be deleted within 24 hours
   • DPersonal data must be stored within a specific geographic region
   Reveal Solution Discussion Select an answer first