Discuss CSA CCSK Exam Topic 4 Question 29

What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?

AAllowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

BMaintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.

CPractice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.

DKeep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.

EBoth B and D.

Suggested Answer: B

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Krystina 11 months ago

E seems like a solid compromise between security and access.

Twanna 11 months ago

I disagree with C, too many people involved can lead to mistakes.

Rory 12 months ago

Surprised that A is even an option. Why give them access?

Margery 12 months ago

I think D is better for user control!

Avery 12 months ago

B is definitely the safest option.

Pa 1 year ago

I vaguely recall a practice question about data deletion, and I think it emphasized the importance of revoking access to keys.

Arleen 1 year ago

I think option E makes sense because it combines both customer-managed keys and client-side storage, but I need to double-check that.

Chauncey 1 year ago

I'm not entirely sure, but I feel like allowing the provider to manage keys could lead to risks.

Nickolas 1 year ago

I remember discussing key management in class, and I think keeping control of the keys is crucial for data security.

Skye 1 year ago

Hmm, I'm a bit unsure on this one. I know IBM Cloud has different storage options, but I can't remember the specific names they use. I'll have to think this through carefully.

Nana 1 year ago

Hmm, I'm a little unsure about this one. I know financial auditing is important, but I'm not totally clear on the specific organizations involved. I'll have to think this through carefully.

Nidia 1 year ago

Okay, I've got this! The accrual basis requires at least one account to be used, and the fundamental accounting equation must balance after each transaction. I'm confident option C is the correct answer.

Matt 1 year ago

I think the key here is that the Development Team should be self-organizing. Option C about slicing the Sprint Backlog into assignments right away doesn't sound like the right approach to me. I'm leaning towards A.

Odette 1 year ago

I feel like the intermediate timer catch event only pauses the process without committing any transactions, similar to the pause feature in other BPMN scenarios.

CSA CCSK Exam - Topic 4 Question 29 Discussion