CISSP Practice Question (Domain 3: Security Architecture and Engineering)
A hospital must move its imaging platform to a public cloud within 90 days; design approval is due next week. The architect proposes provider managed encryption at rest for every workload. What should the security manager do FIRST?
A. Approve the design to protect the contract deadline
B. Confirm data classification and the shared responsibility split
C. Require customer managed keys in a hardware security module
D. Schedule a penetration test of the platform before go live
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
1
11 comments
Vincent Primiani
7
CISSP Practice Question (Domain 3: Security Architecture and Engineering)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by