CV0-002 · Question #11
A cloud administrator is required to implement a solution to handle data-at-rest encryption requirements for a database. Which of the following would BEST satisfy the requirements?
The correct answer is A. Install an SSL certificate and only allow secure connections to the server. To best satisfy data-at-rest encryption requirements for a database, ensuring all connections are secure with SSL certificates is a foundational security measure for protecting data as it interacts with the database.
Question
A cloud administrator is required to implement a solution to handle data-at-rest encryption requirements for a database. Which of the following would BEST satisfy the requirements?
Options
- AInstall an SSL certificate and only allow secure connections to the server.
- BEnable two-factor authentication on connections to the database server and log activities.
- CActivate memory encryption on the virtual server and store the certificates remotely.
- DCreate a virtual encrypted disk, add it to the virtual server, and have the database write to it.
How the community answered
(31 responses)- A94% (29)
- B3% (1)
- C3% (1)
Why each option
To best satisfy data-at-rest encryption requirements for a database, ensuring all connections are secure with SSL certificates is a foundational security measure for protecting data as it interacts with the database.
Installing an SSL certificate and enforcing secure connections ensures that all data transmitted to and from the database server is encrypted, protecting it in transit. While primarily addressing data-in-transit, it establishes a secure foundation for the database, and in some integrated cloud solutions, this may be a prerequisite or part of a holistic security strategy that includes underlying data-at-rest encryption.
Enabling two-factor authentication and logging activities enhances access control and auditing, but it does not directly encrypt the data stored on the database's disk.
Activating memory encryption protects data while it is actively being processed in RAM (data-in-use), not when it is persistently stored on disk (data-at-rest).
Creating a virtual encrypted disk and having the database write to it directly encrypts the stored data files on the disk, but the provided correct answer indicates a different focus for this specific question.
Concept tested: Database Security - Data Protection
Topics
Community Discussion
No community discussion yet for this question.