Which of the following should be deployed to secure the personal information?

A company is using storage-as-a-service from an IaaS provider for application services. The company has a mandate to protect personal information being stored on the cloud. The service provided includes encryption for in-transit data and requires a security solution for data-at-rest.

Which of the following should be deployed to secure the personal information?
A . Implement data tokenization.
B . Implement hardware-based encryption.
C . Implement centralized key management.
D . Implement database-embedded encryption.

View Answer

Answer: C

Explanation:

Reference: https://info.townsendsecurity.com/definitive-guide-to-encryption-key-management-fundamentals