Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Suggested Answer:C🗳️
When a key management system is outside of the cloud environment hosting the application, availability is a primary concern because any access issues with the encryption keys will render the entire application unusable.
The biggest concern with hosting a key management system outside of the cloud environment is:
C. Availability
Explanation:
Hosting a key management system outside of the cloud environment raises concerns about the availability of cryptographic keys when needed, as it may introduce network latency or dependencies that affect timely access to keys for encryption or decryption processes.
https://rb.gy/v1ivpn
should be A. availability is a concern, but not the primary concern. the answer is confidentiality because external management introduces risk related to unauthorized access and exposure of sensitive keys.
A is a key concern for both external/on-prem hosting and in-cloud hosting.
But C is the unique (additional) biggest concern that comes with an externally hosted key-management.
When a key management system is outside of the cloud environment hosting the application, availability is a primary concern because any access issues with the encryption keys will render the entire application unusable
The biggest concern with hosting a key management system outside of the cloud environment is likely confidentiality. A key management system is a type of security system that is used to securely store and manage keys, which are used to encrypt and decrypt data. If the key management system is hosted outside of the cloud environment, it may be more vulnerable to unauthorized access, which could compromise the confidentiality of the keys and the data they protect. This could also affect the integrity and availability of the data, but confidentiality is likely the most significant concern in this situation.
My first thought was that it should be Confidentiality but then I thought that I could be hosting the Key Management on Premise and then that would not be the problem. I think that the correct answer is C Availability.
Availability can be addressed by using Key escrow (providing multiple parties access to the key) however maintaining confidentiality is difficult as multiple parties will need to have access to key even if you have access control, a rouge party could still compromise the key. so I think the answer is confidentiality
risk to key confidentiality could lead to data breach, while risk to key availability leads to data loss. The question here is of the biggest concern and C should be correct.
Outside the cloud env could be on premise. And that does not imply loss of confidentiality. Whereas Availability of the key is always a question when needed for any operation
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
vitoscotorro
Highly Voted 4 years, 5 months agoJamieJerico
Most Recent 5 days, 12 hours agogloby118
1 month agodmo_d
1 year, 1 month agoPika26
1 year, 1 month agoNJALPHA
1 year, 3 months agoDA95
1 year, 7 months agoVoldamort
2 years, 6 months ago[Removed]
2 years, 6 months agoZeezee2
2 years, 7 months agoRamnik
3 years, 4 months agostevrod
3 years, 4 months agoJKCY
3 years, 4 months agoBenojojo
4 years, 1 month agotngx2020
3 years, 8 months agonelombg
2 years, 5 months agoxaccan
2 years, 9 months agoecho_cert
3 years, 10 months agoCL888
3 years, 10 months agobqy5undm4
1 week ago