CCSP Cloud Data Security Practice Question
A healthcare organization stores patient records in a cloud object storage service. They require that all data be encrypted at rest using keys that they generate and manage on-premises, but they want to minimize operational overhead. Which encryption approach should they choose?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Server-side encryption with CSEK
CSEK (customer-supplied encryption keys) allows the customer to provide their own encryption key for each operation, giving them full control while the cloud provider handles the encryption/decryption. This minimizes overhead compared to client-side encryption.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
BYOK
Why it's wrong here
BYOK involves importing a key from on-premises into cloud KMS, but the key is then stored in the cloud, not managed solely on-premises.
- ✗
Client-side encryption
Why it's wrong here
Client-side encryption requires the customer to encrypt data before upload and manage keys themselves, which adds overhead.
- ✓
Server-side encryption with CSEK
Why this is correct
CSEK allows the customer to supply their own key for server-side encryption, balancing control and minimal overhead.
- ✗
Server-side encryption with CMEK
Why it's wrong here
CMEK uses cloud KMS keys managed by the customer but stored in the cloud, not on-premises.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CCSP question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.