Câu 135: 312-50V13: Certified Ethical Hacker v13

You work as a cloud security specialist at SkyNet Solutions. One of your clients is a healthcare organization that plans to migrate its electronic health record (EHR) system to the cloud. This system contains highly sensitive personal and medical data. As part of your job, you need to ensure the security and privacy of this data while it is being transferred and stored in the cloud. You recommend that data should be encrypted during transit and at rest. However, you also need to ensure that even if a cloud service provider(CSP) has access to encrypted data, they should not be able to decrypt it. Which of the following would be the most suitable strategy to meet this requirement?

1. A. Rely on network-level encryption protocols for data transfer.
2. B. Use SSL/TLS for data transfer and allow the CSP to manage encryption keys.
3. C. Utilize the CSP's built-in data encryption services.
4. D. Use client-side encryption and manage encryption keys independently of the CSP. — đáp án hiện tại