ISC2 Certified Cloud Security Professional (CCSP) Practice Question
Your organization is standardizing on a single data classification policy (Public, Internal, Confidential, Restricted) before migrating workloads to AWS, Azure, and GCP. Planned controls-such as automatic encryption, data loss prevention, and lifecycle rules-will trigger from metadata tags that carry the classification value on every object or datastore. Which planning decision will most help prevent gaps in those controls as data moves between the three cloud platforms?
Create separate tag schemes for each provider and translate the labels through an API proxy when data is replicated.
Tag only personally identifiable information (PII) as sensitive and leave all other data untagged to simplify tagging workflows.
Permit project teams to define additional custom classification levels so they can refine the four-level scheme as needed.
Adopt a uniform, provider-agnostic set of classification tags that uses the same names and format in every cloud account and subscription.
To ensure that technical controls activate reliably in each cloud, the same label must appear on every object no matter where it is stored. Defining one authoritative classification taxonomy and requiring all teams to use an identical tag key-value syntax across AWS, Azure, and GCP eliminates the need for per-provider translations and removes the risk that data will lose its meaning when copied or migrated. Relying on provider-specific labels or letting users invent their own introduces inconsistency; focusing only on PII overlooks other sensitive data classes and does not address the enforcement consistency problem.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is a uniform, provider-agnostic set of classification tags important in a multi-cloud environment?
Open an interactive chat with Bash
What problems arise from using provider-specific or user-defined classification tags?
Open an interactive chat with Bash
Why is it insufficient to tag only PII as sensitive in this scenario?
Open an interactive chat with Bash
ISC2 Certified Cloud Security Professional (CCSP)
Cloud Data Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .