Exam CAS-004 topic 1 question 591 discussion

Actual exam question from CompTIA's CAS-004

Question #: 591
Topic #: 1

An organization has been using self-managed encryption keys rather than the free keys managed by the cloud provider. The Chief Information Security Officer (CISO) reviews the monthly bill and realizes the self-managed keys are more costly than anticipated. Which of the following should the CISO recommend to reduce costs while maintaining a strong security posture?

A. Utilize an on-premises HSM to locally manage keys.
B. Adjust the configuration for cloud provider keys on data that is classified as public.
C. Being using cloud-managed keys on all new resources deployed in the cloud.
D. Extend the key rotation period to one year so that the cloud provider can use cached keys.

Show Suggested Answer

Suggested Answer: C 🗳️

by axelcanoble at Dec. 31, 2024, 5:15 p.m.

Comments

Submit Cancel

axelcanoble

1 week, 2 days ago

Selected Answer: B

Answer: B Using cloud provider-managed encryption keys for data that is classified as public reduces costs because cloud-managed keys are typically included as part of the provider's services at no extra charge. At the same time, public data does not require the high-security level provided by self-managed keys, maintaining a strong security posture while reducing unnecessary expenses.

upvoted 1 times

...

Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam

Exam CAS-004 topic 1 question 591 discussion

Comments

axelcanoble

SY0-701