CCSP · Question #135
In application-level encryption, where does the encryption engine reside?
The correct answer is A. In the application accessing the database. Application-level encryption involves the encryption engine residing within the application itself, prior to data being sent for storage.
Question
In application-level encryption, where does the encryption engine reside?
Options
- AIn the application accessing the database
- BIn the OS on which the application is run
- CWithin the database accessed by the application
- DIn the volume where the database resides
How the community answered
(60 responses)- A92% (55)
- B2% (1)
- C3% (2)
- D3% (2)
Why each option
Application-level encryption involves the encryption engine residing within the application itself, prior to data being sent for storage.
In application-level encryption, the encryption and decryption processes are performed by the application itself before the data is sent to the database or storage system. This means the application code handles the cryptographic operations, giving the application owner direct control over the encryption keys and algorithms used.
Encryption in the OS is typically file system or disk encryption, which is below the application layer.
Database-level encryption occurs within the database management system, transparent to the application code.
Encryption in the volume relates to storage-level encryption (e.g., full disk encryption), which is further down the stack and transparent to the application.
Concept tested: Encryption layers and types
Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/encryption-overview#data-at-rest-encryption
Topics
Community Discussion
No community discussion yet for this question.