Exam CCSP topic 1 question 308 discussion

This is not entirely clear to me. Just because it says " Remote key management service", does it mean that it's owned and controlled by the customer?

C. Client key management service is correct

A Client Key Management Service is ideal for customers requiring full control over their encryption keys, ensuring that the cloud provider cannot access the keys or the data encrypted with them. This approach provides maximum ownership, aligns with stringent compliance needs, and enhances data security in the cloud.

For robust control and ownership over the key-management processes, the best choice would be a Client key management service (C). This allows the cloud customer to generate, maintain, and manage their own keys, providing the most autonomy and security assurance.

The correct answer is D - Client-Side Key Management: Similarly to the remote KMS approach, the client-side approach looks to put the customer or cloud user in complete control of the encryption and decryption keys. The main difference here is that most of the processing and control is done on the customer side.

nternal key management service refers to a key-management system that is managed and controlled directly by the cloud customer within their own infrastructure or environment. With an internal key management service, the cloud customer has complete control over the key-management processes, including key generation, distribution, rotation, and revocation

B: Local key management service

A. Remote key management service

What about availability?