400-007 · Question #137
Which best practice ensures data security in the private cloud?
The correct answer is B. Encrypt data at rest and in transition. Encrypting data both at rest and in transit is the foundational best practice for protecting data confidentiality in a private cloud environment.
Question
Which best practice ensures data security in the private cloud?
Options
- AUse IPsec for communication between unsecured network connection
- BEncrypt data at rest and in transition.
- CUse the same vendor for consistent encryption.
- DAnonymize data ownership to comply with privacy rules.
How the community answered
(25 responses)- B96% (24)
- D4% (1)
Why each option
Encrypting data both at rest and in transit is the foundational best practice for protecting data confidentiality in a private cloud environment.
IPsec secures communication over unsecured network links but does not address data stored at rest, making it an incomplete data security control on its own.
Encrypting data at rest protects stored data from unauthorized physical or logical access, while encrypting data in transit (using protocols like TLS or IPsec) protects data as it moves across networks. Together, these two controls address the primary attack surfaces against data confidentiality in a private cloud deployment.
Using the same vendor does not guarantee stronger or consistent encryption - security depends on algorithm strength and proper implementation, not vendor homogeneity.
Anonymizing data ownership is a privacy compliance technique, not an encryption or data protection control for securing data confidentiality.
Concept tested: Data encryption at rest and in transit
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview
Topics
Community Discussion
No community discussion yet for this question.