CCSP · Question #281
Which of the following might make crypto-shredding difficult or useless? Response:
The correct answer is A. Cloud provider also managing the organization's keys. Crypto-shredding relies on the destruction of cryptographic keys to render encrypted data unreadable; this process is undermined if the cloud provider also retains or manages the encryption keys.
Question
Which of the following might make crypto-shredding difficult or useless? Response:
Options
- ACloud provider also managing the organization's keys
- BLack of physical access to the environment
- CExternal attackers
- DLack of user training and awareness
How the community answered
(25 responses)- A96% (24)
- C4% (1)
Why each option
Crypto-shredding relies on the destruction of cryptographic keys to render encrypted data unreadable; this process is undermined if the cloud provider also retains or manages the encryption keys.
Crypto-shredding is the process of deleting or overwriting the encryption keys used to protect data, effectively making the underlying encrypted data unrecoverable. If the cloud provider manages the organization's encryption keys (e.g., using a provider-managed key or having access to customer-managed keys), they might retain copies or have methods to recover them, rendering the organization's attempt at crypto-shredding ineffective for permanent data destruction.
Lack of physical access to the environment is typically a characteristic of cloud computing but doesn't inherently make crypto-shredding useless, as it's a logical data destruction method.
External attackers are a threat that crypto-shredding aims to protect against by rendering data useless if exfiltrated, so they don't make the process useless.
Lack of user training and awareness is a general security weakness but doesn't directly impede the technical process of crypto-shredding.
Concept tested: Crypto-shredding effectiveness and key management
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/data-encryption-best-practices#data-at-rest-encryption-in-the-azure-security-model
Topics
Community Discussion
No community discussion yet for this question.