Customer vs. Cloud Provider Managed Keys CSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following best describes the role of customer-managed keys in cloud encryption?

   • AThey are automatically generated and stored by the cloud provider.
   • BThey are used only for encrypting data in transit, not at rest.
   • CThey enable the cloud provider to decrypt data for support purposes.
   • DThey allow the customer to maintain control over who can access encrypted data.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A financial services firm uses a cloud database service with encryption at rest. They want to ensure that only their internal security team can grant access to the encryption keys, and they need to log every key usage. They also want to prevent the cloud provider's administrators from having direct access to the key material. Which configuration best meets these requirements?

   • ADisable encryption and rely on network security
   • BEnable provider-managed keys and rely on the provider's audit logs
   • CUse customer-supplied keys that are passed with each database connection
   • DUse customer-managed keys in a hardware security module (HSM) and configure key access policies
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a trade-off of using customer-managed keys instead of provider-managed keys?

   • AInability to use the cloud provider's encryption services.
   • BReduced ability to control who can access the keys.
   • CLower security because the customer is not a security expert.
   • DIncreased operational responsibility for key lifecycle management.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a control advantage of customer-managed keys over provider-managed keys?

   • AThe customer can delegate key management to a third party.
   • BThe customer can revoke access to the key, making encrypted data inaccessible.
   • CThe customer can use the same key across multiple cloud providers.
   • DThe customer can automatically rotate the key without any configuration.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How do customer-managed keys provide greater control over access compared to provider-managed keys?

   • AThe customer can define fine-grained permissions for who can use the keys.
   • BThe customer can use the key to encrypt data in any cloud service.
   • CThe provider cannot access the key under any circumstances.
   • DThe customer can view the key material at any time.
   Reveal Solution Discussion Select an answer first