CCSP: Certified Cloud Security Professional

DHCP automatically assigns IP addresses and delivers network configuration settings to resources as they are provisioned, enabling scalable, automated cloud network management.

TLS protects the confidentiality and integrity of data transmitted between systems over a network.

Security concerns should be incorporated when the BCDR plan’s scope is defined, ensuring that security roles, protected systems, and constraints are embedded from the outset rather than retrofitted later.

An RSA token is a possession-based authenticator. A retina scan verifies an inherence characteristic—something the user is—so it supplies an independent MFA factor. Access cards, USB thumb drives, and RFID devices are also possession-based factors. CISA describes MFA factors as something known, possessed, or inherent, and lists physical traits such as iris characteristics as inherence factors.

Compliance-focused data-protection controls address information in all three operational states: stored data (at rest), actively processed data (in use), and transmitted data (in transit). A data custodian is an organizational role, not a data state requiring equivalent protection planning. NIST guidance identifies protecting data at rest, in transit, and in use as enterprise data-protection objectives.