nerdexam
CompTIA

CAS-002 · Question #171

A company runs large computing jobs only during the overnight hours. To minimize the amount of capital investment in equipment, the company relies on the elastic computing services of a major cloud…

The correct answer is D. Data scraped from the hardware platforms. In a shared cloud environment, the greatest confidentiality risk is data remnants left on physical hardware that can be read by subsequent tenants after a virtual machine is destroyed.

Technical Integration of Enterprise Components

Question

A company runs large computing jobs only during the overnight hours. To minimize the amount of capital investment in equipment, the company relies on the elastic computing services of a major cloud computing vendor. Because the virtual resources are created and destroyed on the fly across a large pool of shared resources, the company never knows which specific hardware platforms will be used from night to night. Which of the following presents the MOST risk to confidentiality in this scenario?

Options

  • ALoss of physical control of the servers
  • BDistribution of the job to multiple data centers
  • CNetwork transmission of cryptographic keys
  • DData scraped from the hardware platforms

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    20% (5)
  • D
    68% (17)

Why each option

In a shared cloud environment, the greatest confidentiality risk is data remnants left on physical hardware that can be read by subsequent tenants after a virtual machine is destroyed.

ALoss of physical control of the servers

Loss of physical control is an inherent characteristic of cloud computing but is a general concern rather than the most direct or specific confidentiality risk in this elastic-resource scenario.

BDistribution of the job to multiple data centers

Distribution across multiple data centers raises jurisdictional concerns but does not represent the most direct confidentiality threat stemming from shared physical hardware reuse.

CNetwork transmission of cryptographic keys

Cryptographic key transmission is a risk that can be mitigated with TLS and is not specific to the elastic or shared-hardware nature of the scenario described.

DData scraped from the hardware platformsCorrect

When virtual machines are destroyed in a shared cloud environment, residual data may persist on the underlying physical storage media and can potentially be read or scraped by other cloud customers whose workloads are subsequently allocated to the same hardware. This data remanence issue is unique to multi-tenant cloud environments and poses a direct threat to confidentiality. Physical media sanitization by the cloud provider is the only mitigation, and the customer has no control over this process.

Concept tested: Data remanence and confidentiality in multi-tenant cloud environments

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-144.pdf

Topics

#cloud computing#data remanence#shared infrastructure#confidentiality

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice