Difficulty: Hard

Average Score: 33%

Which action should a customer take to add an extra layer of protection to the data stored in a public cloud environment?

Rationale

Use additional encryption for sensitive files and folders.

Encrypting sensitive files and folders provides an essential layer of protection by rendering data unreadable to unauthorized users, even if they gain access to the public cloud environment. This ensures that sensitive information remains confidential and secure, which is critical when handling data in less controlled settings like public clouds.

A (Use web application firewalls (WAFs)) YOUR ANSWER

Web application firewalls are designed to protect applications by filtering and monitoring HTTP traffic between a web application and the internet. While they can safeguard against certain types of attacks, they do not specifically add protection to stored data itself, making them less effective for securing files and folders in a cloud environment.

B (Use additional encryption for sensitive files and folders) CORRECT

This choice is the most effective action since encryption secures the actual data stored in the cloud, ensuring that even if an unauthorized party accesses the data, they cannot read it without the decryption key. This layer of security is crucial for protecting sensitive information against breaches.

C (Use block storage instead of file storage) YOUR ANSWER

Block storage and file storage refer to different ways of storing data, but they do not inherently provide additional security to the data itself. While block storage can offer performance benefits and is often used for databases and applications, it does not protect the sensitive information contained within the data.

D (Use database activity monitoring (DAM)) YOUR ANSWER

Database activity monitoring focuses on tracking and analyzing database activity to detect suspicious actions. While it enhances security by monitoring access and usage patterns, it does not add a protective layer to the data stored within the database, making it insufficient on its own for securing sensitive files in the cloud.

Conclusion

Adding an extra layer of protection to data stored in a public cloud environment is best achieved through additional encryption for sensitive files and folders. This method ensures that the data remains secure and unreadable to unauthorized users, while the other options, although useful in different contexts, do not provide the same level of direct data protection. Emphasizing encryption is vital in maintaining data confidentiality in cloud storage.

Related Questions

View all