Discuss IAPP CIPT Exam Topic 5 Question 116

An organization must terminate their cloud vendor agreement immediately. What is the most secure way to delete the encrypted data stored in the cloud?

ATransfer the data to another location.

BInvoke the appropriate deletion clause in the cloud terms and conditions.

CObtain a destruction certificate from the cloud vendor.

DDestroy all encryption keys associated with the data.

Suggested Answer: D

The most secure way to ensure the deletion of encrypted data stored in the cloud is to destroy all encryption keys associated with the data. Without the encryption keys, the encrypted data becomes inaccessible and unreadable, effectively rendering it useless. This method ensures that the data cannot be recovered, even if the physical storage remains intact. According to IAPP guidelines, key destruction is a recognized method for securely disposing of encrypted data because it eliminates the possibility of data decryption. This approach aligns with best practices for data security and privacy.

Get Premium CIPT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Elouise 2 months ago

I feel like option A just moves the problem. Better to destroy the keys!

Shannan 2 months ago

Option B is risky. What if the vendor doesn't comply?

Viva 2 months ago

I agree, but option C is also important. A destruction certificate provides proof.

Domingo 3 months ago

I think option D is the best. Destroying the keys ensures no one can access the data.

Scarlet 3 months ago

A seems risky. Transferring data could lead to leaks. Better stick with D.

Galen 3 months ago

B is crucial too. We need to follow the contract to avoid legal issues.

Lera 3 months ago

I agree, but C is also important. A destruction certificate proves the data is gone.

Shanda 3 months ago

I think D is the best option. Destroying the keys means no one can access the data.

Ira 3 months ago

A is risky. Transferring data could lead to exposure. Better to focus on D.

Jaclyn 4 months ago

C is a must! A destruction certificate proves the data is gone for good.

Elli 4 months ago

I agree, but B is also important. The deletion clause is crucial for legal protection.

Earnestine 4 months ago

I think D is the best choice. Destroying the keys ensures no one can access the data.

Julene 4 months ago

Totally agree, destroying keys is the way to go!

Bette 4 months ago

Wait, can you really trust them to delete everything?

Mariann 6 months ago

A destruction certificate sounds like a good backup plan.

Farrah 6 months ago

I think invoking the deletion clause is crucial too.

Rhea 6 months ago

Just destroy the encryption keys, that's the safest bet!

Lakeesha 6 months ago

Totally agree with D, no keys means no access!

Pete 6 months ago

C is important too, need that certificate for proof.

Pedro 7 months ago

Wait, can you really just destroy the keys? Sounds risky.

Dahlia 7 months ago

I think B is more reliable, just follow the contract.

Bettina 7 months ago

D is the best option, gotta destroy those keys!

Denny 7 months ago

I’m leaning towards destroying the encryption keys, but I’m a bit confused about whether transferring data first could complicate things.

Margot 7 months ago

I feel like getting a destruction certificate is a good idea, but I wonder if it guarantees that the data is really gone.

Dyan 7 months ago

I remember a practice question about data deletion, and I think invoking the deletion clause could be important too, but it might not be enough on its own.

Xenia 8 months ago

I think destroying the encryption keys is the most secure option, but I'm not entirely sure if that's the only step needed.

IAPP CIPT Exam - Topic 5 Question 116 Discussion