easyMultiple SelectObjective-mapped
CCSP Practice Question: Which TWO of the following are valid methods for…
Which TWO of the following are valid methods for securing data at rest in a cloud storage service?
⚠ Common exam trap
ISC2 often tests the distinction between encryption methods (client-side vs. server-side) and security controls (e.g., logging vs. encryption), so the trap here is that candidates may confuse access logging or public access settings with data-at-rest protection mechanisms.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implementing client-side encryption before uploading data.
Client-side encryption ensures data is encrypted before it leaves the client environment, so the cloud provider never has access to the plaintext. This is a valid method for securing data at rest in cloud storage, as the encrypted objects are stored in the service and can only be decrypted by the client holding the keys.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disabling encryption to reduce latency.
Why it's wrong here
Disabling encryption reduces security.
- ✓
Implementing client-side encryption before uploading data.
Why this is correct
Client-side encryption ensures data is encrypted before transmission.
- ✓
Using server-side encryption with customer-managed keys.
Why this is correct
This is a standard method for data at rest encryption.
- ✗
Setting the storage bucket to public read access.
Why it's wrong here
Public access increases risk.
- ✗
Enabling access logging for the storage bucket.
Why it's wrong here
Logging is for auditing, not encryption.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.