nerdexam
CSA

CCSK · Question #130

What are the three valid options for protecting data as it moves to and within the cloud?

The correct answer is A. Client/Application Encryption, Link/Network Encryption, Proxy-Based Encryption. There are a few options for in-transit encryption depending on what the cloud platform supports. One way is to encrypt before sending to the cloud (client-side encryption). Network encryption (TLS/SFTP/etc.) is another option. Most cloud provider APIs use Transport Layer…

Cloud Data Security

Question

What are the three valid options for protecting data as it moves to and within the cloud?

Options

  • AClient/Application Encryption, Link/Network Encryption, Proxy-Based Encryption
  • BClient/Application Encryption, Link/Network Encryption, Hypervisor Encryption
  • CClient/Application Bundling, Link/Network Bundling, Proxy-Based Bundling
  • DPassword Encryption, Link/Network Encryption, Proxy-Based Encryption
  • EClient/Application Encryption, Cloud Encoding, Proxy-Based Encryption

How the community answered

(20 responses)
  • A
    80% (16)
  • B
    5% (1)
  • C
    10% (2)
  • E
    5% (1)

Explanation

There are a few options for in-transit encryption depending on what the cloud platform supports. One way is to encrypt before sending to the cloud (client-side encryption). Network encryption (TLS/SFTP/etc.) is another option. Most cloud provider APIs use Transport Layer Security (TLS) by default; if not, pick a different provider, since this is an essential security capability. Proxy- based encryption may be a third option, where you place an encryption proxy in a trusted area between the cloud user and the cloud provider and the proxy manages the encryption before transferring the data to the provider.

Topics

#data in transit#encryption#proxy-based encryption#network encryption

Community Discussion

No community discussion yet for this question.

Full CCSK Practice