Describe Cloud Data Concepts CCSP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A healthcare organization is migrating patient records to a cloud storage service. The compliance team requires that data be immediately inaccessible to users once a retention period expires, and that the deletion process be verifiable for auditors. The storage administrator is planning the data life cycle policy. Which combination of actions should the administrator implement?

   • AConfigure a lifecycle policy that transitions objects to an archive tier at the end of the retention period, then relies on the provider's background garbage collection for eventual deletion.
   • BApply a legal hold to all objects and manually delete them through the management console once the retention period ends, documenting the date in a spreadsheet.
   • CDisable object versioning and rely on the provider's default retention lock, which automatically purges all data at the end of the contractual term.
   • DSet a lifecycle rule to delete objects on the exact expiration date and enable object versioning with a separate rule to purge prior versions, then review provider audit logs to confirm deletion.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company stores sensitive data in a cloud object storage service. The data is encrypted at rest by the provider. The company's compliance team requires that the company retain control over the encryption keys. The provider offers both provider-managed keys and customer-managed keys (CMK). Which option should the company choose to satisfy the compliance requirement?

   • AProvider-managed keys with a service-level agreement (SLA) that guarantees key deletion on request.
   • BCustomer-managed keys stored in the same storage account as the data.
   • CCustomer-managed keys, because the company can control key rotation, access, and revocation.
   • DProvider-managed keys, because they are automatically rotated and reduce the administrative burden.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A multinational company uses a cloud storage service for active project files. The data protection officer (DPO) requires that data transferred between the company's on-premises data center and the cloud be protected from interception, and that internal transfers between cloud storage tiers be logged. Which configuration should the administrator implement?

   • AUse a private connection such as ExpressRoute for all ingress and egress, and enable audit logging only for external access attempts.
   • BEnable TLS for all ingress and egress traffic, and enable access logging on the storage account to capture tier transitions.
   • CEncrypt data with client-side encryption before upload and disable logging to reduce the attack surface.
   • DUse a VPN gateway for all traffic and rely on the provider's default logging, which captures all data-plane operations including tier transitions.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is designing a hybrid cloud architecture where data is stored in a cloud object storage service and processed by an on-premises application. The data must be transferred securely and efficiently. Which approach should the company use for the data flow?

   • ATransfer data over the public internet without encryption because the data is already encrypted at rest.
   • BUse a site-to-site VPN to encrypt all traffic between the on-premises network and the cloud storage service.
   • CUpload data to a staging area in the cloud, then have the on-premises application download it over a public connection.
   • DUse a direct internet connection and rely on the storage service's access control policies to protect the data.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A cloud storage provider advertises that it uses data dispersion to protect customer data. A security auditor asks how this affects data retrieval performance and availability. Which response is accurate?

   • AData dispersion has no effect on retrieval performance or availability; it only affects security.
   • BData dispersion improves availability because the data can be reconstructed even if some storage nodes are unavailable, as long as a sufficient number of fragments are accessible.
   • CData dispersion reduces availability because the data is dependent on all fragments being present at all times.
   • DData dispersion always increases retrieval latency because all fragments must be read from every location before the data can be reassembled.
   Reveal Solution Discussion Select an answer first