Certified Cloud Security Professional (CCSP) — Question 229

Which security concept, if implemented correctly, will protect the data on a system, even if a malicious actor gains access to the actual system?

Answer options

• A. Sandboxing
• B. Encryption
• C. Firewalls
• D. Access control

Correct answer: B

Explanation

Encryption is the correct answer because it secures data by converting it into a format that is unreadable without the proper decryption key, thus protecting it even if someone gains system access. Sandboxing, firewalls, and access control primarily focus on restricting access and managing traffic, but they do not protect the data itself once access is gained.