Courseiva
Cloud Data SecuritymediumMultiple ChoiceObjective-mapped

CCSP Cloud Data Security Practice Question

A data lifecycle policy requires that data be destroyed after a retention period. In a cloud object storage service, what is the most secure method to ensure that data is irretrievably destroyed?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Use a lifecycle policy to expire objects and delete delete markers

Object deletion with versioning disabled ensures that the data is removed and cannot be recovered. If versioning is enabled, a delete marker is added; previous versions remain. Configuring a lifecycle policy to expire objects after a retention period automates deletion.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Use a lifecycle policy to expire objects and delete delete markers

    Why this is correct

    Lifecycle policies can delete objects permanently, and with delete marker expiration, all traces are removed.

  • Overwrite the objects with random data multiple times before deletion

    Why it's wrong here

    Overwriting is not guaranteed in cloud storage; providers use different mechanisms.

  • Enable MFA delete and then delete the objects

    Why it's wrong here

    MFA delete adds protection against accidental deletion but does not ensure irretrievable destruction.

  • Delete the objects and then delete the bucket

    Why it's wrong here

    Deleting the bucket might not permanently erase data; residual copies may exist.

About these practice questions

This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.