IAPP CIPT Exam - Topic 5 Question 116 Discussion

Actual exam question for IAPP's CIPT exam

Question #: 116
Topic #: 5

An organization must terminate their cloud vendor agreement immediately. What is the most secure way to delete the encrypted data stored in the cloud?

ATransfer the data to another location.

BInvoke the appropriate deletion clause in the cloud terms and conditions.

CObtain a destruction certificate from the cloud vendor.

DDestroy all encryption keys associated with the data.

Show Suggested Answer

Suggested Answer: D

The most secure way to ensure the deletion of encrypted data stored in the cloud is to destroy all encryption keys associated with the data. Without the encryption keys, the encrypted data becomes inaccessible and unreadable, effectively rendering it useless. This method ensures that the data cannot be recovered, even if the physical storage remains intact. According to IAPP guidelines, key destruction is a recognized method for securely disposing of encrypted data because it eliminates the possibility of data decryption. This approach aligns with best practices for data security and privacy.

by Lera at Mar 06, 2026, 01:56 PM

Limited Time Offer

25%

Off

Get Premium CIPT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rhea

3 days ago

Just destroy the encryption keys, that's the safest bet!

upvoted 0 times

...

Lakeesha

8 days ago

Totally agree with D, no keys means no access!

upvoted 0 times

...

Pete

13 days ago

C is important too, need that certificate for proof.

upvoted 0 times

...

Pedro

18 days ago

Wait, can you really just destroy the keys? Sounds risky.

upvoted 0 times

...

Dahlia

23 days ago

I think B is more reliable, just follow the contract.

upvoted 0 times

...

Bettina

29 days ago

D is the best option, gotta destroy those keys!

upvoted 0 times

...

Denny

1 month ago

I’m leaning towards destroying the encryption keys, but I’m a bit confused about whether transferring data first could complicate things.

upvoted 0 times

...

Margot

1 month ago

I feel like getting a destruction certificate is a good idea, but I wonder if it guarantees that the data is really gone.

upvoted 0 times

...

Dyan

1 month ago

I remember a practice question about data deletion, and I think invoking the deletion clause could be important too, but it might not be enough on its own.

upvoted 0 times

...

Xenia

2 months ago

I think destroying the encryption keys is the most secure option, but I'm not entirely sure if that's the only step needed.

upvoted 0 times

...