Certified Information Security Manager CISM · Free Practice Question Medium
Question 88
Which method is most effective in controlling access to sensitive data stored in a cloud environment?
- A Establishing strict data retention and deletion policies
- B Enforcing multi-factor authentication for all users
- C Conducting regular penetration testing on the cloud infrastructure
- D Implementing data encryption at rest and in transit
Reveal correct answer
Correct answer: B
Explanation
The Correct Answer: Enforcing multi-factor authentication for all users: Multi-factor authentication (MFA) significantly enhances security by requiring multiple forms of verification before granting access. In a cloud environment, where access points are numerous, MFA is crucial for controlling access and preventing unauthorized users from accessing sensitive data, regardless of encryption or retention policies. The Incorrect Answers: Implementing data encryption at rest and in transit: While encrypting data helps protect its confidentiality during storage and transmission, it does not directly control who has access to the data. Encryption is more about protecting data integrity and confidentiality than access control. Conducting regular penetration testing on the cloud infrastructure: Penetration testing identifies vulnerabilities and strengthens overall security but does not control access to data. It is a supplementary measure to identify weaknesses rather than directly manage data access. Establishing strict data retention and deletion policies: Data retention and deletion policies protect against unauthorized data retention and potential leaks but do not directly manage access. They play a supportive role in overall data management rather than direct access control.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
