Lesson 4 Cloud Data Security- C838|2023/24 Update|Graded A+

It is the phase for short-term storage when planning security controls for the data. False Archive phase activities in the cloud will largely be driven by whether a user is using the same cloud provider for backups and its production environment. True The physical security of the data in short-term storage is also important. False Cryptography will, as with most data-related controls, be an essential consideration. True Put the phases of the cloud data life cycle in order Archive Create Destroy Share Store Use Create Store Use Share Archive Destroy Allocates a storage space within the cloud; this storage space is represented as an attached drive to the user's virtual machine Volume storage Allows a significant level of description, including the marking, labels, classification and categorization; it also enhances the opportunity for indexing capabilities Object-based storage Provides some sort of structure for stored data; it is backend storage in the datacenter, accessed by users utilizing online apps Database Acts as a form of data caching, usually near geophysical locations of high use demand, improves bandwidth and provides quality Content delivery network For this deployment, you are encrypting the volume or folder of the database, with the encryption engine and keys residing on the instances attached to the volume. External file system encryption protects from media theft, lost backups, and external attack but does not protect against attacks with access to the application layer, the instance's OS, or the database itself. File-level encryption The encryption engine resides within the database, and it is transparent to the application. Keys usually reside within the instance, although processing and management of them may also be offloaded to an external KMS. This encryption can provide effective protection from media theft, backup system intrusions, and certain database and application-level attacks. Transparent encryption