CCSK · Question #145
CCM: A hypothetical company called "Security4Sure" provides a cloud based service to share confidential documents. The confidential documents are stored in their servers and are encrypted. How will…
The correct answer is B. Encrypt the data at rest and put in place appropriate measures for management of encryption keys. To ensure the protection of client data within their data center, Security4Sure should encrypt the data at rest. Encrypting data at rest helps safeguard sensitive information even if physical access to the servers is obtained. Additionally, Security4Sure should put in place…
Question
CCM: A hypothetical company called "Security4Sure" provides a cloud based service to share confidential documents. The confidential documents are stored in their servers and are encrypted. How will Security4Sure ensure the protection of client data within their data center?
Options
- AAudit plans should not be adopted and supported by the most senior governing elements of the
- BEncrypt the data at rest and put in place appropriate measures for management of encryption keys
- CImplement redundant or backup power supplies, redundant data communications connections,
- DUse a secure transfer channel (i.e. TLS)
How the community answered
(28 responses)- A11% (3)
- B71% (20)
- C14% (4)
- D4% (1)
Explanation
To ensure the protection of client data within their data center, Security4Sure should encrypt the data at rest. Encrypting data at rest helps safeguard sensitive information even if physical access to the servers is obtained. Additionally, Security4Sure should put in place appropriate measures for the management of encryption keys. Proper key management ensures that only authorized individuals have access to the encryption keys, which are crucial for decrypting the data.
Topics
Community Discussion
No community discussion yet for this question.