When describing security and compliance goals in cloud solutions, which of the following is a primary consideration?

Question

Options

• AMinimizing the number of users with access to the cloud console
• BEnsuring data encryption both at rest and in transit
• CUsing public networks for data transfer to reduce costs
• DAvoiding the use of identity and access management policies

• A
  3% (1)
• B
  82% (32)
• C
  10% (4)
• D
  5% (2)

Explanation

Ensuring data encryption both at rest and in transit (B) is a foundational security requirement in cloud environments because it protects sensitive data from unauthorized access whether it's stored on disk or moving across networks - this is universally mandated by compliance frameworks like GDPR, HIPAA, and PCI-DSS.

Why the distractors are wrong:

• A is partially good practice but not a primary security goal - least-privilege access applies to all users and roles, not just console users, making this too narrow.
• C is actively harmful: public networks expose data to interception; private endpoints or encrypted tunnels are the standard.
• D is the opposite of best practice - IAM policies are essential for controlling who can access what, and disabling them would be a major security failure.

Memory tip: Think "data in motion, data at rest - always encrypt both at best." Encryption is the one control that protects data even after a breach, which is why it tops every compliance checklist.

No community discussion yet for this question.