When applying IBM Cloud security best practices, which of the following measures is crucial for protecting data at rest?

Question

Options

• AUse of IBM Cloud Internet Services
• BImplementation of regular data backups
• CEncryption of data using IBM Key Protect
• DFrequent password rotation for user accounts

• A
  14% (7)
• B
  8% (4)
• C
  74% (37)
• D
  4% (2)

Explanation

Encrypting data using IBM Key Protect (C) directly addresses data at rest protection - Key Protect is IBM Cloud's dedicated key management service that uses envelope encryption to protect stored data, making it unreadable without the managed keys. IBM Cloud Internet Services (A) is a CDN/DDoS protection tool focused on data in transit and network security, not storage. Regular data backups (B) address availability and recovery, not confidentiality - backups of unencrypted data are just as vulnerable as the originals. Frequent password rotation (D) is an identity management control that protects access credentials, not the data itself stored on disk or in object storage.

Memory tip: Match the threat to the control - "at rest" = encryption. Think of Key Protect as the vault lock for your stored data; you need the key to open it, regardless of who accesses the storage layer.

No community discussion yet for this question.