Cloud Data Security Flashcards

Which cloud storage type is best suited for unstructured data such as images, videos, and backups?

Answer: Object storage

Object storage is designed for unstructured data, storing items as objects with metadata and a unique identifier rather than in a hierarchical file system.

What does a Data Loss Prevention (DLP) solution primarily do in a cloud environment?

Answer: Monitors and controls the movement of sensitive data to prevent unauthorized exfiltration

DLP solutions inspect and control data flows to detect and prevent the unauthorized transmission of sensitive information outside authorized boundaries.

In the context of cloud data security, what is a data custodian responsible for?

Answer: Implementing and managing the technical security controls that protect data

The data custodian is responsible for the day-to-day management and technical protection of data as specified by the data owner.

Which standard specifically provides guidance on personally identifiable information (PII) protection in public clouds?

Answer: ISO/IEC 27018

ISO/IEC 27018 is the code of practice specifically for protection of PII in public cloud computing environments.

What is the key advantage of client-side encryption over server-side encryption in cloud storage?

Answer: The cloud provider never has access to the plaintext data or encryption keys

With client-side encryption, data is encrypted before it leaves the customer's environment, so the cloud provider can only ever see ciphertext.

A company stores sensitive medical records in a cloud database. Which regulation primarily governs this data in the United States?

Answer: HIPAA

HIPAA (Health Insurance Portability and Accountability Act) governs the security and privacy of protected health information (PHI) in the US.