easyMultiple ChoiceObjective-mapped
ISC2 CC Practice Question: A small business uses a cloud file storage…
A small business uses a cloud file storage service that allows sharing links. An employee mistakenly shared a folder containing customer data via a public link. The business wants to prevent such incidents in the future without blocking legitimate sharing. Which access control method should they implement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Require authentication for shared links
Requiring authentication for shared links ensures that only intended recipients can access the data, reducing the risk of public exposure. Disabling all sharing is too restrictive. Watermarking and encryption do not prevent sharing to unauthorized users.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disable all external sharing
Why it's wrong here
This blocks legitimate sharing entirely, which is too restrictive for business needs.
- ✓
Require authentication for shared links
Why this is correct
Authentication limits access to authorized users only, preventing public exposure.
- ✗
Use watermarking on documents
Why it's wrong here
Watermarking deters misuse but does not prevent sharing to unauthorized users.
- ✗
Encrypt all files
Why it's wrong here
Encryption protects data at rest but does not control who can access shared links.
Go deeper
Related to this question
Learn chapter
Authentication and Authorization Methods
Key term
Folder
A folder is a logical container used to organize and group digital files, resources, or cloud-based assets within a system or platform.
Key term
Exposure
Exposure is the measure of potential loss or harm to an organization's assets when a vulnerability is exploited by a threat, often expressed as the window of time or degree of access an attacker has.
About these practice questions
One of 976 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.