Examice

Exam CCSK All QuestionsBrowse all questions from this exam

Question 164

CCM: A hypothetical company called "Security4Sure" provides a cloud based service to share confidential documents. The confidential documents are stored in their servers and are encrypted. How will Security4Sure ensure the protection of client data within their data center?

Audit plans should not be adopted and supported by the most senior governing elements of the organization (e.g. the board and the management)

Encrypt the data at rest and put in place appropriate measures for management of encryption keys

Implement redundant or backup power supplies, redundant data communications connections, environmental controls (e.g., air conditioning, fire suppression) and various security devices

Use a secure transfer channel (i.e. TLS)

Correct Answer: B

To ensure the protection of client data within their data center, Security4Sure should focus on encrypting the data at rest and implementing appropriate measures for managing encryption keys. Encryption at rest ensures that the data remains secure even if physical access to the storage devices is obtained. Effective management of encryption keys is crucial as it ensures only authorized individuals can decrypt the data, adding an additional layer of security.

Discussion

byfenerOption: B

To ensure the protection of client data within their data center, Security4Sure should encrypt the data at rest. Encrypting data at rest helps safeguard sensitive information even if physical access to the servers is obtained. Additionally, Security4Sure should put in place appropriate measures for the management of encryption keys. Proper key management ensures that only authorized individuals have access to the encryption keys, which are crucial for decrypting the data.

Viral123

I think you did not read the question correctly, it says data is stored in their servers and are encrypted so B is incorrect C is the correct answer.

Viral123Option: C

C is the correct answer