CCSP · Question #142
Designers making applications for the cloud have to take into consideration risks and operational constraints that did not exist or were not as pronounced in the legacy environment. Which of the follo
The correct answer is C. Encryption for data at rest and in motion. Cloud applications require a strong focus on encryption for data in all states due to the shared and distributed nature of cloud infrastructure, a concern that was less pronounced in on-premises environments.
Question
Designers making applications for the cloud have to take into consideration risks and operational constraints that did not exist or were not as pronounced in the legacy environment. Which of the following is an element cloud app designers may have to consider incorporating in software for the cloud that might not have been as important in the legacy environment?
Options
- AIAM capability
- BDDoS resistance
- CEncryption for data at rest and in motion
- DField validation
How the community answered
(36 responses)- A6% (2)
- B3% (1)
- C83% (30)
- D8% (3)
Why each option
Cloud applications require a strong focus on encryption for data in all states due to the shared and distributed nature of cloud infrastructure, a concern that was less pronounced in on-premises environments.
IAM capability (Identity and Access Management) is crucial in both legacy and cloud environments for controlling user access to resources.
DDoS resistance (Distributed Denial of Service) is important for any public-facing application, whether legacy or cloud, to ensure availability.
In a cloud environment, data is stored and transmitted across potentially less controlled or shared infrastructure, making encryption for both data at rest (stored on disks) and data in motion (transmitted over networks) critical for protecting sensitive information. While important in legacy systems, the distributed and multi-tenant nature of the cloud elevates encryption to a paramount design consideration.
Field validation is a fundamental security and data integrity practice in all application development, regardless of the deployment environment.
Concept tested: Cloud application design security considerations
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview
Topics
Community Discussion
No community discussion yet for this question.