An organization is expanding its private cloud to a hybrid deployment to accommodate growth in
its web / database application. The CIO is concerned about the security risks associated with the
public cloud. They do not view firewall security as adequate to protect important company data.
Encryption is being considered as a security measure.
As the cloud architect, what would you recommend?

A.
Utilize database encryption.
Tell the CIO that search look-ups can be resource intensive.

B.
Utilize database encryption.
Tell the CIO that the level of control is very granular, but substantial developer resources are
required.

C.
Utilize application encryption.
Tell the CIO that search look-ups can be resource intensive.

D.
Utilize application encryption.
Tell the CIO that the level of control is very granular, and developer resource requirements are
minimal.