Exam 312-50v12 topic 1 question 126 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 126
Topic #: 1

You are a cybersecurity specialist at CloudTech Inc., a company providing cloud-based services. You are managing a project for a client who wants to migrate their sensitive data to a public cloud service. To comply with regulatory requirements, the client insists on maintaining full control over the encryption keys even when the data is at rest on the cloud. Which of the following practices should you implement to meet this requirement?

A. Encrypt data client-side before uploading to the cloud and retain control of the encryption keys.
B. Use the cloud service provider's encryption services but store keys on-premises.
C. Rely on Secure Sockets Layer (SSL) encryption for data at rest.
D. Use the cloud service provider's default encryption and key management services.

Show Suggested Answer

Suggested Answer: A 🗳️

by DarioReymag at Feb. 6, 2024, 10:44 p.m.

Comments

Submit Cancel

insaniunt

Highly Voted 10 months, 3 weeks ago

Selected Answer: A

To meet the client's requirement of maintaining full control over the encryption keys even when the data is at rest on the cloud, the most appropriate practice would be: A. Encrypt data client-side before uploading to the cloud and retain control of the encryption keys. This approach ensures that the client encrypts the data on their premises before uploading it to the cloud, and they retain control of the encryption keys. This way, even if the data is stored in the cloud, only the client holds the keys necessary for decryption, providing them with full control over their sensitive information

upvoted 5 times

...