Customer vs. Cloud Provider Managed Keys CSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In cloud encryption, what is the defining characteristic of customer-managed keys?

   • AThe cloud provider generates the keys but allows the customer to view them.
   • BThe customer uses a key provided by the cloud provider for all encryption operations.
   • CThe customer creates, owns, and controls the encryption keys used to protect their data.
   • DThe customer relies on the provider to rotate the keys automatically.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A startup is building a prototype application and wants to encrypt data at rest in a cloud database. They have no dedicated security team and need to deploy quickly. They are not subject to any regulations that require customer control over keys. What is the most suitable key management approach?

   • AUse customer-supplied keys to avoid storing keys in the cloud
   • BUse no encryption because it is only a prototype
   • CUse provider-managed keys to simplify deployment
   • DUse customer-managed keys to ensure future compliance
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is using a cloud provider's managed database service. They want to ensure that the provider's administrators cannot access the encryption keys. They also want to maintain the ability to rotate keys without involving the provider's support team. Which approach should they use?

   • AUse customer-supplied keys and store them in the database connection string
   • BUse provider-managed keys and request rotation through support
   • CUse provider-managed keys and rely on the provider's security controls
   • DUse customer-managed keys in a cloud HSM
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a key management responsibility that typically belongs to the cloud provider when using provider-managed keys?

   • ADefining which users can access the keys.
   • BRotating the encryption keys on a regular schedule.
   • CGenerating the key material using a customer-owned HSM.
   • DDeciding when to disable or delete a key.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A small e-commerce company is launching a new website and wants to encrypt customer data at rest in a cloud database. They have a limited IT staff and want to minimize operational overhead. They do not have specific compliance requirements that demand customer control over keys. What is the most appropriate key management approach?

   • AUse customer-supplied keys for every database transaction
   • BUse no encryption because the data is not sensitive
   • CUse provider-managed keys to reduce management burden
   • DUse customer-managed keys to maintain full control
   Reveal Solution Discussion Select an answer first