CompTIA CASP+ (CAS-004) — Question 31

A company is moving most of its customer-facing production systems to the cloud-facing production systems to the cloud. IaaS is the service model being used.
The Chief Executive Officer is concerned about the type of encryption available and requires the solution must have the highest level of security.
Which of the following encryption methods should the cloud security engineer select during the implementation phase?

Answer options

• A. Instance-based
• B. Storage-based
• C. Proxy-based
• D. Array controller-based

Correct answer: B

Explanation

The correct answer is B, Storage-based encryption, as it provides a robust level of security for data at rest in the cloud. Instance-based encryption (A) does not secure data as effectively when it's stored, while Proxy-based (C) and Array controller-based (D) methods may not offer the same comprehensive protection for cloud environments.