Chapter 4

Question 1

Correct Order of Cloud Secure Data Lifecycle

Answer 1

• Create
• Store
• Use
• Share
• Archive
• Destroy

Question 2

Three Components of DLP are

Answer 2

• Discovery and Classification
• Monitoring
• Enforcement

Question 3

This type of storage typically uses APIs or network requests

Answer 3

• Object

Question 4

DLP implementation goals

Answer 4

• Policy Enforcement
• Data Discovery
• Data Loss Mitigation

Question 5

Six Steps of the tokenization Architecture

Answer 5

1. An application collects or generates a piece of sensitive data.
2. Data is sent to the tokenization server; it is not stored locally.
3. The tokenization server generates the token. The sensitive data and the token are stored in the token database.
4. The tokenization server sends back the token to the application.
5. The application stores the token instead of the original data.
6. When sensitive data is required, an authorized application or user requests it.

Question 6

Approaches to data masking

Answer 6

• Random Substitution: Replace the Value with a Random Value
• Algorithm Substitution: Replaces the value with an algorithm-generated value
• Shuffle: Shuffles different values from the data set
• Masking: Hides certain parts of the data using specific characters
• Deletion: Deletes the data or uses a null value

Question 7

Encryption Engine

Answer 7

File-Level Encryption - Database servers typically reside on volume storage. For this deployment, you are encrypting the volume or folder of the database, with the encryption engine and keys residing on the instances attached to the volume.

Transparent Encryption - Many Database-management systems have the ability to encrypt the entire database or specific portions, such as tables. The encryption engine resides within the database and it is transparent to the application.

Application-level Encryption - The encryption engine resides at the application that is utilizing the database.

Question 8

The Key Principles of enterprise architecture that should be followed at all times :

Answer 8

• Explain protections that enable trust in the cloud
• Provide directions to secure information preserved by regulations
• Prepare the resilient architecture and support multi landlord platforms

Question 9

Cloud storage architectures and their associated cloud models

Answer 9

IaaS: Volume-based and object-based storage

PaaS and SaaS: Databases

Question 10

Challenges associated with Key Management

Answer 10

• Backup and Replication
• Access to the Keys
• Key Storage