Exam CCAK topic 1 question 206 discussion

C. Encryption for data at rest. Encryption for data at rest is an example of a preventive control in an Infrastructure as a Service (IaaS) environment. Preventive controls are designed to avoid or mitigate security incidents before they occur. By encrypting data at rest, the IaaS service provider ensures that stored data is protected from unauthorized access, thereby preventing data breaches and ensuring confidentiality. This control helps guard against potential threats by making it more difficult for attackers to access sensitive information even if they gain access to the storage system. The other options—privileged access monitoring, threat hunting, and incident response—are more aligned with detective or corrective controls. Privileged access monitoring involves tracking access to detect potential misuse, threat hunting involves actively searching for threats, and incident response deals with managing and mitigating incidents after they occur.

CCAK P# 122