Câu 288: 312-50V13: Certified Ethical Hacker v13

You are a cybersecurity specialist at CloudTech Inc., a company providing cloud-based services. You are managing a project for a client who wants to migrate their sensitive data to a public cloud service. To comply with regulatory requirements, the client insists on maintaining full control over the encryption keys even when the data is at rest on the cloud. Which of the following practices should you implement to meet this requirement?

1. A. Encrypt data client-side before uploading to the cloud and retain control of the encryption keys. — đáp án hiện tại
2. B. Use the cloud service provider's encryption services but store keys on-premises.
3. C. Rely on Secure Sockets Layer (SSL) encryption for data at rest.
4. D. Use the cloud service provider's default encryption and key management services.