問題文
A compliance requirement says that customer records must be protected both while they travel over the network and while they sit in the database. Which pair of measures addresses the two halves?
選択肢
- Apply access controls, which cover both halves by deciding who is able to reach the records at all.
- Encrypt the connections so that traffic cannot be read on the wire, and encrypt the stored data so that the media cannot be read if it is taken.
- Encrypt the connections only, because once the data has arrived over an encrypted channel it remains protected by the same session key.
- Encrypt the stored data only, since traffic on an internal network is not exposed to anyone outside the building.