CompTIA CASP+ Practice Test

What measure should be implemented to minimize risks when hosting email in the cloud?

1. Regular software audits

2. Ensure logins are over an encrypted channel and obtain NDAs from providers

3. Using only in-house email servers

4. Training staff on cloud security

The correct answer is: Ensure logins are over an encrypted channel and obtain NDAs from providers

Implementing secure logins over an encrypted channel is crucial when hosting email in the cloud, as it protects sensitive data during transmission. Encryption helps to ensure that unauthorized parties cannot intercept and read the information being sent between the user and the cloud service provider. This is especially important for email, which often contains private and confidential communications. Additionally, obtaining Non-Disclosure Agreements (NDAs) from providers establishes a legal framework and accountability for how they handle sensitive information. This measure helps to mitigate risks related to data breaches and ensures that the cloud provider is committed to maintaining the confidentiality of the data being processed. While regular software audits, using only in-house email servers, and training staff on cloud security are important practices, they do not address the immediate risk associated with data transmission and provider accountability as effectively as ensuring logins are secured and implementing NDAs. Together, these actions create a more robust framework for protecting email communications in a cloud environment.