nerdexam
(ISC)2

CCSP · Question #205

The Cloud Security Alliance (CSA) publishes, the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, all of the following activity can…

The correct answer is B. Improper policy. The question asks to identify which activity, from the given options, is NOT a direct cause of data loss according to CSA's Notorious Nine.

Submitted by tunde_lagos· Apr 18, 2026Cloud Data Security

Question

The Cloud Security Alliance (CSA) publishes, the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, all of the following activity can result in data loss except ____________.

Options

  • AMisplaced crypto keys
  • BImproper policy
  • CIneffectual backup procedures
  • DAccidental overwrite

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    95% (36)
  • D
    3% (1)

Why each option

The question asks to identify which activity, from the given options, is NOT a direct cause of data loss according to CSA's Notorious Nine.

AMisplaced crypto keys

Misplaced crypto keys directly result in data loss as data encrypted with lost keys becomes unrecoverable.

BImproper policyCorrect

While improper policy can lead to conditions that make data loss possible, it is an indirect cause and not a direct activity resulting in data loss itself; rather, it describes a flaw in governance or management.

CIneffectual backup procedures

Ineffectual backup procedures directly lead to data loss when original data is corrupted or lost and no valid recovery point exists.

DAccidental overwrite

Accidental overwrite is a direct action that destroys existing data, leading to data loss.

Concept tested: CSA Notorious Nine cloud threats, data loss causes

Source: https://cloudsecurityalliance.org/research/notorious-nine/

Topics

#CSA Notorious Nine#Data Loss#Cloud Security Threats#Security Policy

Community Discussion

No community discussion yet for this question.

Full CCSP Practice