What is the best practice for platform encryption configuration for this solution?

Makana Pharmaceutical is planning to run a Patient support program on Health Cloud. A System Administrator has been tasked to ensure the platform encryption has been configured. The patient’s name is stored on firstname and lastname fields on the person account record. Firstname and Lastname field have been identified as holding PHI (Personal Health Information) data. They are also important search criteria commonly used by Users to find a patient record. The Compliance team has indicated that all PHI Data must be encrypted at rest.

What is the best practice for platform encryption configuration for this solution?
A . Encrypt all PHI/PII data
B . Encrypt all data
C . Use Class Encryption to encrypt field identified as PHI
D . Use a Deterministic Encryption Policy on Account FirstName & LastName fields.
E . Use a Probabilistic Encryption Policy on Account FirstName & LastName fields.

View Answer

Answer: D

Explanation:

Deterministic encryption is a type of encryption policy that allows you to encrypt fields that are used as search criteria, such as FirstName and LastName fields on the Account object. Deterministic encryption ensures that identical plaintext values always result in identical ciphertext values, which enables searching and filtering on encrypted fields. This is suitable for PHI data that needs to be encrypted at rest but also searchable by users.