A Company Is Using Storage-As-A-Service from an IaaS Provider for Application

Multiple Choice

A company is using storage-as-a-service from an IaaS provider for application services. The company has a mandate to protect personal information being stored on the cloud. The service provided includes encryption for in-transit data and requires a security solution for data-at-rest. Which of the following should be deployed to secure the personal information?

A) Implement data tokenization.
B) Implement hardware-based encryption.
C) Implement centralized key management.
D) Implement database-embedded encryption.