Question 1 of 30
In a web application development project, a team is tasked with implementing security measures to protect sensitive user data. They decide to use encryption for data at rest and data in transit. Which of the following approaches best ensures that the encryption keys are managed securely throughout the application lifecycle, while also complying with industry standards such as NIST SP 800-57?
Implement a centralized key management system (KMS) that uses hardware security modules (HSMs) for key generation, storage, and access control, ensuring that keys are rotated regularly and access is logged.
Store encryption keys within the application code to simplify access and reduce latency, while relying on environment variables to manage key values.
Use a third-party service for key management but do not implement any logging or monitoring of key access, as this adds unnecessary complexity.
Generate encryption keys manually and distribute them via email to team members, ensuring that everyone has access to the keys when needed.

Preparing for CISCO 200-901 Developing Applications and Automating Workflows using Cisco Core Platforms (DEVASC)? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free