ISACA Certified Information Security Manager Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Encrypt consumer data in transit and at rest. This is the only option that protects the data end‑to‑end, regardless of where it resides.

• Chose B4

  Encrypting consumer data in transit (as it travels over the internet) and at rest (when stored on servers or databases) is a fundamental and effective security measure. This helps safeguard the confidentiality of the information even if unauthorized access occurs. Encryption ensures that even if data is intercepted or accessed by unauthorized parties, it remains unreadable and secure. While options such as applying strong authentication to online accounts (option A), using secure encrypted transport layer (option C), and applying a masking policy to consumer data (option D) are important security practices, encrypting consumer data addresses the core concern of protecting the data itself from unauthorized access or disclosure.

• Chose B3

  B. Encrypt consumer data in transit and at rest