Câu 67: CCSK: Certificate of Cloud Security Knowledge

ENISA: Because it is practically impossible to process data in encrypted form, customers should have the following expectation of cloud providers:

1. A. Provider should be PCI compliant
2. B. Provider should immediately notify customer whenever data is in plaintext form
3. C. Provider must be highly trustworthy and have compensating controls to protect customer data when it is in plaintext form — đáp án hiện tại
4. D. Provider should always manage customer encryption keys with hardware security module (HSM) storage
5. E. Homomorphic encryption should be implemented where necessary