CSA
CCSK · Question #237
When designing an encryption system, you should start with a threat model.
The correct answer is B. True. When designing an encryption system, you should start with a threat model. For example, do you trust a cloud provider to manage your keys? How could the keys be exposed? Where should you locate the encryption engine to manage the threats you are concerned with?
Cloud Data Security
Question
When designing an encryption system, you should start with a threat model.
Options
- AFalse
- BTrue
How the community answered
(42 responses)- A26% (11)
- B74% (31)
Explanation
When designing an encryption system, you should start with a threat model. For example, do you trust a cloud provider to manage your keys? How could the keys be exposed? Where should you locate the encryption engine to manage the threats you are concerned with?
Topics
#encryption design#threat modeling#security design principles
Community Discussion
No community discussion yet for this question.