Question
An administrator, who works for a financial institution, is required to implement data security controls for data at rest within AI systems that involve data disclosure. Which of the following is the most suitable control?
- A. Data lineage
- B. Rate limits
- C. Encryption Correct
- D. Masking
Explanation
Encryption is the standard control for protecting data at rest: if storage, backups or model data stores are accessed without authorization, the data cannot be read without the keys. Masking mainly hides values when data is displayed or shared with lower-privileged users, rate limits protect an interface from abuse, and data lineage tracks where data came from rather than protecting it.