nerdexam
CompTIA

DS0-001 · Question #119

A database administrator needs to ensure data that is being migrated from a company's system to a third-party vendor is secure. Which of the following is the best security measure for the…

The correct answer is A. Server-side encryption. Server-side encryption (A) directly protects data in transit and at rest during migration by encrypting it on the server before transmission, ensuring that even if intercepted, the data remains unreadable to unauthorized parties - which is precisely the threat model when…

Data and Database Security

Question

A database administrator needs to ensure data that is being migrated from a company's system to a third-party vendor is secure. Which of the following is the best security measure for the administrator to implement?

Options

  • AServer-side encryption
  • BData loss prevention
  • CData security audit
  • DGDPR compliance

How the community answered

(41 responses)
  • A
    78% (32)
  • B
    2% (1)
  • C
    5% (2)
  • D
    15% (6)

Explanation

Server-side encryption (A) directly protects data in transit and at rest during migration by encrypting it on the server before transmission, ensuring that even if intercepted, the data remains unreadable to unauthorized parties - which is precisely the threat model when handing data to a third-party vendor. Data loss prevention (B) monitors and controls data movement but doesn't encrypt or secure the data itself, so it won't protect against interception. A data security audit (C) is a retrospective assessment of security posture, not a protective measure applied during migration. GDPR compliance (D) is a regulatory framework that may require encryption but is not itself a security measure you "implement."

Memory tip: Think of migration like mailing a package - encryption is the locked box that protects the contents, while DLP is the shipping policy, an audit is reviewing past shipments, and GDPR is the law requiring you to ship safely. Only the locked box actually secures the data.

Topics

#Server-side encryption#Data migration#Vendor security#Data protection

Community Discussion

No community discussion yet for this question.

Full DS0-001 Practice