SK0-005 · Question #480
A startup is migrating a stand-alone application that stores Pll to the cloud. Which of the following should be encrypted?
The correct answer is B. Data at rest. The scenario specifies that the application 'stores' PII, meaning the primary concern is protecting data that resides on disk in the cloud environment. Data at rest encryption (e.g., AES-256 for database fields or disk volumes) ensures that even if cloud storage is compromised…
Question
A startup is migrating a stand-alone application that stores Pll to the cloud. Which of the following should be encrypted?
Options
- AData in transit
- BData at rest
- CData backups
- DData archives
How the community answered
(26 responses)- A4% (1)
- B96% (25)
Explanation
The scenario specifies that the application 'stores' PII, meaning the primary concern is protecting data that resides on disk in the cloud environment. Data at rest encryption (e.g., AES-256 for database fields or disk volumes) ensures that even if cloud storage is compromised or improperly accessed, the PII remains unreadable. Data in transit is important too, but it is typically handled automatically by TLS/HTTPS and is not the distinguishing concern here. The operative word in the question is 'stores' - pointing directly to encryption of persisted/stored data.
Topics
Community Discussion
No community discussion yet for this question.