Describe How End-To-End Encryption Principles Apply to APIs 350-901 Practice Questions (Page 6)

Questions 26–26

1. 26expert · hard

   A company's API processes payment data. The data is encrypted in transit using TLS and at rest in the database. The security team wants to add an additional layer of protection by encrypting the data at the application layer before it is stored. Which consideration is most important when implementing application-layer encryption?

   • ADatabase encryption: the database must use TDE
   • BTLS configuration: the TLS cipher suite must be strong
   • CNetwork security: the API must be on a private network
   • DKey management: the encryption keys must be stored separately from the data and rotated regularly
   Reveal Solution Discussion Select an answer first