Certified in Risk and Information Systems Control (CRISC) — Question 478

Which of the following is the BEST way to protect sensitive data from administrators within a public cloud?

Answer options

• A. Encrypt the data in the cloud database.
• B. Use an encrypted tunnel to connect to the cloud.
• C. Encrypt data before it leaves the organization.
• D. Encrypt physical hard drives within the cloud.

Correct answer: C

Explanation

The best way to protect sensitive data from cloud administrators is to encrypt the data before it leaves the organization, ensuring that even if the cloud provider has access, they cannot read the data. Options A and D involve encrypting data after it has reached the cloud, while B only secures the connection but does not address the data itself.