ISC2 Certified Cloud Security Professional (CCSP) Practice Question

A security team needs to locate any customer email addresses that might be written to application-generated audit logs stored as JSON objects in an S3 bucket. Developers frequently change the property name that holds the address (examples include "email", "user_email", and "contact"). To ensure the scan continues to find the data even when field names change, which data-discovery capability should the team enable in their cloud-native tool?

  • Scanning that classifies files solely by S3 object metadata such as tags, prefixes, or file extension

  • Filtering based on object MIME header followed by checksum validation of the file contents

  • JSON-aware content inspection that applies pattern or regex matching to all values, independent of key names

  • Discovery that requires the administrator to map expected column or field names before each scan

ISC2 Certified Cloud Security Professional (CCSP)
Cloud Data Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot