CCSP · Question #62
One of the security challenges of operating in the cloud is that additional controls must be placed on file storage systems because ____________.
The correct answer is D. Virtual machines are stored as snapshotted files when not in use. A security challenge in cloud file storage is that virtual machines, which contain sensitive data, are stored as easily accessible snapshotted files when not in use.
Question
One of the security challenges of operating in the cloud is that additional controls must be placed on file storage systems because ____________.
Options
- AFile stores are always kept in plain text in the cloud
- BThere is no way to sanitize file storage space in the cloud
- CVirtualization necessarily prevents the use of application-based security controls
- DVirtual machines are stored as snapshotted files when not in use
How the community answered
(54 responses)- A2% (1)
- B4% (2)
- D94% (51)
Why each option
A security challenge in cloud file storage is that virtual machines, which contain sensitive data, are stored as easily accessible snapshotted files when not in use.
Cloud file stores are not always kept in plain text; cloud providers offer and often default to encryption at rest.
Cloud providers offer methods for securely deleting and sanitizing file storage space, though the customer shares responsibility in ensuring its proper use.
Virtualization does not prevent the use of application-based security controls; such controls operate effectively within virtualized environments.
In cloud environments, virtual machines and their associated storage are often managed as files that can be snapshotted or duplicated. These snapshots can contain sensitive data, configurations, and system states, creating a persistent artifact that requires rigorous access controls and encryption to prevent unauthorized exposure, even when the VM is not actively running.
Concept tested: Cloud security risks, virtualization storage
Source: https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-governance#gv-4-define-and-implement-segmentation-strategies
Topics
Community Discussion
No community discussion yet for this question.