Discuss ISC2 CCSP Exam Topic 7 Question 108

Key maintenance and security are paramount within a cloud environment due to the widespread use of encryption for both data and transmissions.

Which of the following key-management systems would provide the most robust control over and ownership of the key-management processes for the cloud customer?

ARemote key management service

BLocal key management service

CClient key management service

DInternal key management service

Suggested Answer: A

A remote key management system resides away from the cloud environment and is owned and controlled by the cloud customer. With the use of a remote service, the cloud customer can avoid being locked into a proprietary system from the cloud provider, but also must ensure that service is compatible with the services offered by the cloud provider. A local key management system resides on the actual servers using the keys, which does not provide optimal security or control over them. Both the terms internal key management service and client key management service are provided as distractors.

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Tiera 6 months ago

Local management (B) could work, but D is still stronger.

Reynalda 6 months ago

A is too remote. I prefer D for strong security.

Gilma 7 months ago

C is good, but D has more control over keys.

Tracie 7 months ago

But what about C? Client management is user-friendly.

Sharita 7 months ago

I agree, D seems most secure. Ownership matters.

Ernest 8 months ago

I doubt that local is the best; it could be risky.

Odelia 8 months ago

Wait, isn't remote key management more secure?

Odelia 8 months ago

Internal key management service sounds too complicated.

Tina 8 months ago

Local key management service gives you more control.

Nelida 8 months ago

I'm leaning towards the local key management service - gotta keep those keys close to home.

Socorro 8 months ago

Internal key management service is the way to go for maximum security and ownership.

Aliza 9 months ago

The client key management service seems like it would give the customer the most control.

Stephanie 9 months ago

I'm a bit confused about the difference between local and internal key management services. Do they both offer the same level of control?

Jeanice 9 months ago

I remember practicing a question similar to this, and I think client key management services were highlighted for their flexibility.

Coletta 9 months ago

I think the internal key management service might be the best option since it gives the most control to the organization. But I'm not entirely sure.

Dusti 9 months ago

Hmm, I'm not totally sure about this one. I'll have to weigh the pros and cons of each option carefully to determine which provides the most control for the customer.

Sharee 9 months ago

This is right up my alley! I've studied cloud security and encryption in depth, so I'm confident I can nail this question.

Cassie 10 months ago

I think D is the best choice. Internal gives full control.

Marshall 10 months ago

I think the local key management service would be the most robust option.

Mertie 10 months ago

I'm a bit confused by the wording here. What exactly does "robust control over and ownership of the key-management processes" mean? I need to make sure I understand that before I can answer.

Lelia 10 months ago

I feel like remote key management services could be less secure since they rely on external providers. But I need to double-check that.

Quentin 10 months ago

I think client key management is the best option!

Darrin 11 months ago

Okay, I've got a strategy - I'll eliminate the options that don't seem to give the customer the most control over the key management processes.

Shawana 11 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the differences between the key management options.

Verdell 5 months ago

↳ replying to Shawana

I’m leaning towards local key management for flexibility.

Margret 6 months ago

↳ replying to Shawana

True, but internal might be more reliable for sensitive data.

Evette 6 months ago

↳ replying to Shawana

But what about client key management? It sounds secure too.

Merilyn 6 months ago

↳ replying to Shawana

Agreed! It keeps everything in-house.

Cornell 6 months ago

↳ replying to Shawana

I think the internal key management service gives the best control.

ISC2 CCSP Exam - Topic 7 Question 108 Discussion