Exam CCSP topic 1 question 367 discussion

A. Portability is the biggest challenge to using DLP to protect data at rest in a cloud computing environment. DLP, or data loss prevention, is a security technology that is designed to prevent sensitive data from being accidentally or intentionally leaked or accessed by unauthorized users. However, one of the key features of cloud computing is portability, which allows organizations to move their data and applications between different cloud environments and even between on-premises systems and the cloud. This makes it difficult for DLP systems to effectively protect data at rest in the cloud, as the data may be constantly moving between different locations and systems. To address this challenge, organizations can use a combination of DLP technologies, data encryption, and other security measures to protect their data in the cloud.

Resource pooling presents the biggest challenge to Data Loss Prevention (DLP) for data at rest in cloud environments because multiple customers share the same underlying physical infrastructure (e.g., storage, compute, and network resources). This makes it difficult to apply traditional DLP techniques, as organizations often lack direct control over where and how their data is physically stored. Why Not the Others? A. Portability → Affects the ability to move data between providers but does not directly impact DLP for data at rest. C. Interoperability → Ensures cloud systems work together, but does not present a primary challenge for DLP enforcement. D. Reversibility → Concerns data removal and exit strategies but is not a major challenge for DLP in protecting stored data.

C: Interoperability

Portability?

B. Resource pooling