A company runs a MySQL database in the cloud that stores customer PII. They need to encrypt the data at rest, but they also need to allow the database to perform searches and joins on the data without application changes. Which encryption approach should they use?

Encrypt the entire database backup and restore it on demand

Use a VPN to encrypt traffic between the application and the database

Application-level encryption of sensitive columns before insertion

Transparent data encryption (TDE) with a key managed by the cloud provider's KMS

Which of the following is a key management practice?

Storing keys in plain text alongside the data

Rotating encryption keys periodically

Never changing keys once they are created

What is the primary purpose of encryption at rest in a cloud environment?

To prevent data from being accessed by authorized users

To protect data from unauthorized access while it is stored on disk or in a database

To secure data while it is being transmitted between a client and a server

To ensure data is deleted permanently when no longer needed

What is application-level encryption in the context of cloud databases?

The database administrator manually encrypts each record

The database encrypts data automatically without application involvement

The application encrypts data before storing it in the database

The network connection to the database is encrypted

In symmetric encryption, how is the same key used?

The same key is used for both encryption and decryption

The key is generated separately for each session

The key is only used for encryption, not decryption

One key is used for encryption and a different key for decryption

EC-CouncilCloud Security Essentials

Domain 3Objective 2

Encryption at Rest and in Transit CSE Practice Questions (Page 4)

Part of the Data Protection and Encryption in the Cloud domain, which makes up ~12% of our current practice bank.

55questions here

11free pages

15concepts

15 Concepts in This Objective

Encryption at rest overview
Encryption in transit overview
Symmetric encryption
Asymmetric encryption
Key management fundamentals
Cloud provider key management services
Encryption for data at rest in cloud storage
Encryption for data at rest in databases
TLS/SSL for data in transit
VPN and IPsec for data in transit
Encryption for API and service communication
Envelope encryption
Bring Your Own Key (BYOK)
Server-side vs client-side encryption
Compliance and regulatory considerations

Questions 16–20

16application · medium
A company runs a MySQL database in the cloud that stores customer PII. They need to encrypt the data at rest, but they also need to allow the database to perform searches and joins on the data without application changes. Which encryption approach should they use?
Select an answer first
17foundation · easy
Which of the following is a key management practice?
Select an answer first
18foundation · easy
What is the primary purpose of encryption at rest in a cloud environment?
Select an answer first
19foundation · easy
What is application-level encryption in the context of cloud databases?
Select an answer first
20foundation · easy
In symmetric encryption, how is the same key used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.