Problem Statement
Which two layers cover common database encryption needs?
Explanation
Encrypt at rest to protect media theft. Use TLS in transit to protect the wire. For highly sensitive fields, consider app-level encryption or tokenization with secure key management and rotation.
Code Solution
SolutionRead Only
ssl = on -- enable TLS per engine -- TDE or disk encryption configured at server/storage layer
Practice Sets
This question appears in the following practice sets:
