CAS-002 · Question #171
A company runs large computing jobs only during the overnight hours. To minimize the amount of capital investment in equipment, the company relies on the elastic computing services of a major cloud…
The correct answer is D. Data scraped from the hardware platforms. In a shared cloud environment, the greatest confidentiality risk is data remnants left on physical hardware that can be read by subsequent tenants after a virtual machine is destroyed.
Question
A company runs large computing jobs only during the overnight hours. To minimize the amount of capital investment in equipment, the company relies on the elastic computing services of a major cloud computing vendor. Because the virtual resources are created and destroyed on the fly across a large pool of shared resources, the company never knows which specific hardware platforms will be used from night to night. Which of the following presents the MOST risk to confidentiality in this scenario?
Options
- ALoss of physical control of the servers
- BDistribution of the job to multiple data centers
- CNetwork transmission of cryptographic keys
- DData scraped from the hardware platforms
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C20% (5)
- D68% (17)
Why each option
In a shared cloud environment, the greatest confidentiality risk is data remnants left on physical hardware that can be read by subsequent tenants after a virtual machine is destroyed.
Loss of physical control is an inherent characteristic of cloud computing but is a general concern rather than the most direct or specific confidentiality risk in this elastic-resource scenario.
Distribution across multiple data centers raises jurisdictional concerns but does not represent the most direct confidentiality threat stemming from shared physical hardware reuse.
Cryptographic key transmission is a risk that can be mitigated with TLS and is not specific to the elastic or shared-hardware nature of the scenario described.
When virtual machines are destroyed in a shared cloud environment, residual data may persist on the underlying physical storage media and can potentially be read or scraped by other cloud customers whose workloads are subsequently allocated to the same hardware. This data remanence issue is unique to multi-tenant cloud environments and poses a direct threat to confidentiality. Physical media sanitization by the cloud provider is the only mitigation, and the customer has no control over this process.
Concept tested: Data remanence and confidentiality in multi-tenant cloud environments
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-144.pdf
Topics
Community Discussion
No community discussion yet for this question.