CCSP · Question #205
The Cloud Security Alliance (CSA) publishes, the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, all of the following activity can…
The correct answer is B. Improper policy. The question asks to identify which activity, from the given options, is NOT a direct cause of data loss according to CSA's Notorious Nine.
Question
The Cloud Security Alliance (CSA) publishes, the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, all of the following activity can result in data loss except ____________.
Options
- AMisplaced crypto keys
- BImproper policy
- CIneffectual backup procedures
- DAccidental overwrite
How the community answered
(38 responses)- A3% (1)
- B95% (36)
- D3% (1)
Why each option
The question asks to identify which activity, from the given options, is NOT a direct cause of data loss according to CSA's Notorious Nine.
Misplaced crypto keys directly result in data loss as data encrypted with lost keys becomes unrecoverable.
While improper policy can lead to conditions that make data loss possible, it is an indirect cause and not a direct activity resulting in data loss itself; rather, it describes a flaw in governance or management.
Ineffectual backup procedures directly lead to data loss when original data is corrupted or lost and no valid recovery point exists.
Accidental overwrite is a direct action that destroys existing data, leading to data loss.
Concept tested: CSA Notorious Nine cloud threats, data loss causes
Source: https://cloudsecurityalliance.org/research/notorious-nine/
Topics
Community Discussion
No community discussion yet for this question.