C838 - Managing Cloud Security- Exam Questions with Verified Solutions 100% Guaranteed Pass (Latest Update )

C838 - Managing Cloud Security- Exam Questions with Verified Solutions 100% Guaranteed Pass (Latest Update ) Which phase of the cloud data lifecycle allows both read and process functions to be performed? Share Store Create Archive - Answers Create Which phase of the cloud data security lifecycle typically occurs simultaneously with creation? Use Share Store Destroy - Answers Store Which phase of the cloud data life cycle uses content delivery networks? Share Create Destroy Archive - Answers Share Which phase of the cloud data life cycle is associated with crypto-shredding? Use Store Share Destroy - Answers Destroy Which cloud data storage architecture allows sensitive data to be replaced with unique identification symbols that retain all the essential information about the data without compromising its security? Obfuscation Tokenization Anonymization Randomization - Answers Obfuscation Which methodology could cloud data storage utilize to encrypt all data associated in an infrastructure as a service (IaaS) deployment model? Sandbox encryption Client-side encryption Polymorphic encryption Whole-instance encryption - Answers Whole-instance encryption There is a threat to a banking cloud platform service. The developer needs to provide inclusion in a relational database that is seamless and readily searchable by search engine algorithms. Which platform as a service (PaaS) data type should be used? Structured Unstructured Long-term storage Short-term storage - Answers Structured Which platform as a service (PaaS) storage architecture should be used if an organization wants to store presentations, documents, and audio files? Block Object Distributed Relational database - Answers Block Which technique scrambles the content of data using a mathematical algorithm while keeping the structural arrangement of the data? Tokenization Dynamic masking Proxy-based encryption Format-preserving encryption - Answers Format-preserving encryption Which encryption technique connects the instance to the encryption instance that handles all crypto operations? Proxy Database Server-side Externally managed - Answers Proxy Which type of control should be used to implement custom controls that safeguard data? Application level Management plane Options for access Public and internal sharing - Answers Application level Which element is protected by an encryption system? Data Public key Ciphertext Management engine - Answers Data A cloud administrator recommends using tokenization as an alternative to protecting data without encryption. The administrator needs to make an authorized application request to access the data. Which step should occur immediately before this action is taken? The application collects a token. The application stores the token. The tokenization server generates the token. The tokenization server returns the token to the application. - Answers The application stores the token A company has recently defined classification levels for its data. During which phase of the cloud data life cycle should this definition occur? Use Share Create Archive - Answers Create Which jurisdictional data protection includes dealing with the international transfer of data? Privacy regulation Financial modernization Sarbanes-Oxley act (SOX) Secure choice authorization (SCA) - Answers Privacy regulation Which jurisdictional data protection controls the ways that financial institutions deal with the private information of individuals? Sarbanes-Oxley act (SOX) Gramm-Leach-Bliley act (GLBA) Stored communications act (SCA) Health insurance portability and accountability act (HIPAA) - Answers Gramm-Leach-Bliley act (GLBA) Which jurisdictional data protection safeguards protected health information (PHI)? Directive 95/46/EC Safe harbor regime Personal Data Protection Act of 2000 Health Insurance Portability and Accountability Act (HIPAA) - Answers Health Insurance Portability and Accountability Act (HIPAA) How is the compliance of the cloud service provider's legal and regulatory requirements verified when securing personally identifiable information (PII) data in the cloud? E-discovery process Contractual agreements