Exam CCSP topic 1 question 308 discussion

Actual exam question from ISC's CCSP

Question #: 308
Topic #: 1

Key maintenance and security are paramount within a cloud environment due to the widespread use of encryption for both data and transmissions.
Which of the following key-management systems would provide the most robust control over and ownership of the key-management processes for the cloud customer?

A. Remote key management service
B. Local key management service
C. Client key management service
D. Internal key management service

Show Suggested Answer

Suggested Answer: A 🗳️
A remote key management system resides away from the cloud environment and is owned and controlled by the cloud customer. With the use of a remote service, the cloud customer can avoid being locked into a proprietary system from the cloud provider, but also must ensure that service is compatible with the services offered by the cloud provider. A local key management system resides on the actual servers using the keys, which does not provide optimal security or control over them. Both the terms internal key management service and client key management service are provided as distractors.

by carls233 at Oct. 10, 2021, 12:48 p.m.

Comments

Submit Cancel

Pegasus_orb

Highly Voted 3 years, 5 months ago

This is not entirely clear to me. Just because it says " Remote key management service", does it mean that it's owned and controlled by the customer?

upvoted 5 times

...

MaciekMT

Most Recent 4 months ago

Selected Answer: C

A Client Key Management Service (Client KMS) provides the most robust control and ownership over encryption keys because the cloud customer generates, stores, and manages their own keys. This ensures that only the customer has access to their encryption keys, preventing the cloud provider from decrypting sensitive data. Why Not the Others? A. Remote Key Management Service: Typically managed by the cloud provider, meaning the customer has less direct control over key storage and security. B. Local Key Management Service: Not a standard term in cloud key management. It may imply on-premises key management, but it does not necessarily mean full control in a cloud setting. D. Internal Key Management Service: Usually refers to key management handled within the cloud provider’s environment, giving the provider more control rather than the customer.

upvoted 1 times

...

micky_mouse

6 months, 2 weeks ago

Selected Answer: C

C. Client key management service is correct

upvoted 1 times

...

Sivath

7 months ago

Selected Answer: C

A Client Key Management Service is ideal for customers requiring full control over their encryption keys, ensuring that the cloud provider cannot access the keys or the data encrypted with them. This approach provides maximum ownership, aligns with stringent compliance needs, and enhances data security in the cloud.

upvoted 1 times

...

sweetykaur

8 months, 1 week ago

For robust control and ownership over the key-management processes, the best choice would be a Client key management service (C). This allows the cloud customer to generate, maintain, and manage their own keys, providing the most autonomy and security assurance.

upvoted 2 times

...

TraceSplice

1 year, 3 months ago

Selected Answer: C

The correct answer is D - Client-Side Key Management: Similarly to the remote KMS approach, the client-side approach looks to put the customer or cloud user in complete control of the encryption and decryption keys. The main difference here is that most of the processing and control is done on the customer side.

upvoted 1 times

...

escaprix

2 years ago

Selected Answer: D

nternal key management service refers to a key-management system that is managed and controlled directly by the cloud customer within their own infrastructure or environment. With an internal key management service, the cloud customer has complete control over the key-management processes, including key generation, distribution, rotation, and revocation

upvoted 2 times

...