A company wants to ensure that only managers can view employee salary information in a cloud database. The database also needs to log all access to salary data for auditing. What should be implemented?

Use a view that excludes the salary column and grant all users access to the view.

Mask the salary column for all users and unmask it only for managers.

Create a database role for managers with SELECT permission on the salary column, and enable database auditing.

Encrypt the salary column and give the decryption key to all employees.

Which of the following is a best practice for encryption key management in the cloud?

Share keys with all authorized users

Store keys in the same location as the encrypted data

Regularly rotate encryption keys

Use the same key for all encryption operations

What does data sovereignty refer to in a cloud computing context?

Data is backed up in multiple regions

Data is accessible only from within the cloud provider's network

Data is encrypted with a customer-managed key

Data is subject to the laws and regulations of the country where it is stored

Which of the following is a secure method for disposing of data in the cloud?

Moving the data to a different region

Deleting the data from the application interface

EC-CouncilCertified Cloud Security Engineer

Domain 3Objective 1

Data Security in Cloud CCSE Practice Questions (Page 7)

Part of the Cloud Data Security and Operations domain, which makes up ~19% of our current practice bank.

53questions here

11free pages

12concepts

Questions 31–35

31foundation · easy
Which of the following is a common tool or service used for data auditing in the cloud?
Select an answer first
32application · medium
A company wants to ensure that only managers can view employee salary information in a cloud database. The database also needs to log all access to salary data for auditing. What should be implemented?
Select an answer first
33foundation · easy
Which of the following is a best practice for encryption key management in the cloud?
Select an answer first
34foundation · easy
What does data sovereignty refer to in a cloud computing context?
Select an answer first
35foundation · easy
Which of the following is a secure method for disposing of data in the cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCSE” is a trademark of its owner, used for identification only.