Describe Cloud Data Concepts CCSP Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   Which type of data flow is typically subject to the most stringent security controls because it crosses the cloud provider's boundary?

   • AIngress and egress traffic
   • BData archiving to cold storage
   • CData replication between availability zones
   • DInternal transfers between virtual networks
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company uses a cloud storage service for customer data. The security team discovers that a large volume of data is being transferred from the cloud to an external IP address during off-peak hours. The transfers are not associated with any known business process. What should the security team do first to investigate this data flow?

   • AReview the storage access logs to identify the source, destination, and authentication method used for the egress transfers.
   • BDisable the storage account immediately to stop the data exfiltration, then investigate the logs.
   • CChange the storage account access keys to invalidate any stolen credentials.
   • DContact the external IP address owner to request they stop receiving the data.
   Reveal Solution Discussion Select an answer first