Which of the following is best practice for the implementation of cloud database encryption?

Question

Options

• AThe vendor supports public key encryption.
• BThe vendor encrypts primary keys and indexed columns.
• CThe organization implements proprietary encryption algorithms.
• DThe organization maintains its own encryption keys.

• B
  6% (1)
• C
  6% (1)
• D
  89% (16)

Explanation

When using cloud-hosted databases, the organization retaining control of its own encryption keys (D) - often called Bring Your Own Key (BYOK) - is the security best practice. If the vendor holds the keys, they can potentially access, expose, or lose the data, and the organization has no recourse. Maintaining key custody ensures only the organization can decrypt its data, even if the cloud environment is compromised. Option A (vendor supporting public key encryption) is a basic feature, not a best practice in itself. Option B is problematic because encrypting only primary keys and indexed columns leaves most data unencrypted. Option C is wrong because proprietary (non-standard) algorithms are considered insecure - proven, peer-reviewed standards like AES should always be used.

No community discussion yet for this question.