ISC2 Certified Cloud Security Professional (CCSP) Practice Question

A cloud-hosted application writes customer support transcripts to an Amazon S3 bucket in JSON format. Management asks you to extend the existing data discovery process so that credit-card numbers embedded in those JSON files are reliably identified and sent to the DLP system for policy enforcement. Which capability is most important for the discovery tool to support when dealing with this semi-structured data source?

  • Inline deep-packet inspection on the cloud gateway to analyze traffic entering the S3 bucket.

  • JDBC-based metadata crawlers that enumerate fixed columns in relational database tables.

  • Schema-on-read parsing that can traverse JSON objects with expressions such as JSONPath to expose individual field values.

  • Block-level hashing of S3 objects to detect previously identified files containing credit-card data.

ISC2 Certified Cloud Security Professional (CCSP)
Cloud Data Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot