nerdexam
(ISC)2

CCSP · Question #62

One of the security challenges of operating in the cloud is that additional controls must be placed on file storage systems because ____________.

The correct answer is D. Virtual machines are stored as snapshotted files when not in use. A security challenge in cloud file storage is that virtual machines, which contain sensitive data, are stored as easily accessible snapshotted files when not in use.

Submitted by lucia.co· Apr 18, 2026Cloud Platform and Infrastructure Security

Question

One of the security challenges of operating in the cloud is that additional controls must be placed on file storage systems because ____________.

Options

  • AFile stores are always kept in plain text in the cloud
  • BThere is no way to sanitize file storage space in the cloud
  • CVirtualization necessarily prevents the use of application-based security controls
  • DVirtual machines are stored as snapshotted files when not in use

How the community answered

(54 responses)
  • A
    2% (1)
  • B
    4% (2)
  • D
    94% (51)

Why each option

A security challenge in cloud file storage is that virtual machines, which contain sensitive data, are stored as easily accessible snapshotted files when not in use.

AFile stores are always kept in plain text in the cloud

Cloud file stores are not always kept in plain text; cloud providers offer and often default to encryption at rest.

BThere is no way to sanitize file storage space in the cloud

Cloud providers offer methods for securely deleting and sanitizing file storage space, though the customer shares responsibility in ensuring its proper use.

CVirtualization necessarily prevents the use of application-based security controls

Virtualization does not prevent the use of application-based security controls; such controls operate effectively within virtualized environments.

DVirtual machines are stored as snapshotted files when not in useCorrect

In cloud environments, virtual machines and their associated storage are often managed as files that can be snapshotted or duplicated. These snapshots can contain sensitive data, configurations, and system states, creating a persistent artifact that requires rigorous access controls and encryption to prevent unauthorized exposure, even when the VM is not actively running.

Concept tested: Cloud security risks, virtualization storage

Source: https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-governance#gv-4-define-and-implement-segmentation-strategies

Topics

#Cloud Storage Security#Virtual Machine Security#Data at Rest#Cloud Infrastructure

Community Discussion

No community discussion yet for this question.

Full CCSP Practice