Which of the following is an effective countermeasure against cloud-based data breaches?

Question

Options

• AUsing weak passwords for cloud accounts
• BEncrypting data at rest and in transit
• CAllowing unrestricted access to cloud storage
• DDisabling multi-factor authentication

• B
  94% (31)
• C
  3% (1)
• D
  3% (1)

Explanation

Encrypting data at rest and in transit (B) is a foundational security control that renders stolen or intercepted data unreadable to attackers - even if a breach occurs, the data remains protected without the decryption keys. Option A undermines security entirely, since weak passwords are one of the leading causes of unauthorized cloud account access. Option C (unrestricted access) violates the principle of least privilege and exponentially increases the attack surface. Option D removes a critical second layer of authentication, making accounts far easier to compromise through credential theft or phishing.

Memory tip: Think "encrypt to protect" - the only answer that adds a defensive layer rather than removing one. Any choice that weakens authentication, relaxes permissions, or reduces credential strength is always wrong in a security context.

No community discussion yet for this question.