CCSP - Cloud Data Security (20% of the exam) - Section 2.1
Describe cloud data concepts.
The cloud data lifecycle phases (create, store, use, share, archive, destroy), data dispersion, and data flows across a cloud estate.
cloud data lifecycledata dispersiondata flow mapping
Practice question for this objective
lock_openFree sampleCloud Data Securityeasy
In the cloud data lifecycle, which phase immediately follows the Create phase and is where data is committed to a storage location such as a database or object store?
AUse, where data is processed or viewed by an application or user after it has been written to a repository
BStore, where newly generated data is placed into a repository and where controls such as encryption at rest are typically first appliedcheck_circle Correct
CShare, where data is made available to other users, partners, or systems inside or outside the organisation
DArchive, where data is moved to long-term or cold storage once it is no longer in active use
Recall the ordered phases of the cloud data lifecycle and identify which phase follows Create. The cloud data lifecycle is an ordered sequence: Create, Store, Use, Share, Archive, Destroy. Store follows Create because freshly generated data must be written to a repository, and this is the point where at-rest controls like encryption are first applied.
Why A is wrong: Use is tempting because data feels immediately usable, but Use is the third phase and comes after Store, not directly after Create.
Why B is correct: The recognised cloud data lifecycle runs Create, Store, Use, Share, Archive, Destroy, so Store directly follows Create and is where at-rest protections are first applied.
Why C is wrong: Share is a later phase concerned with distributing data; it cannot follow Create because the data must first be stored and used.
Why D is wrong: Archive sounds like a storage step, but it is a late-lifecycle phase for inactive data and does not follow Create.
Answers that look right on this material and are not. Each one is a distractor from a different question in the CCSP bank for this domain.
The share phase, because the files now reside in a collaboration suite that other staff could open.
errorWhy it is wrong: Share covers data being made accessible to other parties or systems; mere potential to open a file that has just been saved is not the act of sharing, so this jumps ahead in the lifecycle.
Data flow mapping, the practice of documenting how information moves between systems, processes, and jurisdictions
errorWhy it is wrong: Data flow mapping is about charting movement of data, not physically fragmenting it across nodes, so it does not match the described behaviour.
It encrypts data in transit between microservices so that intercepted traffic cannot be read by an attacker
errorWhy it is wrong: Encryption in transit is a technical control that protects moving data, but data flow mapping documents movement rather than performing the encryption itself.