Question 60
An encryption team rotates a column master key but app clients still use outdated metadata. Following remediation, what safeguard BEST prevents a repeat of this specific failure?
Explanation
Correct Answer
Rehearse key recovery and avoid distributing keys in scripts. This guards against recurrence because column key hierarchy and client metadata must agree for encrypted column access. The direct remediation is: Perform supported key rotation and client configuration changes as a coordinated migration.
Incorrect Answers
Document leakage tradeoffs before enabling secure enclaves. The current task instead requires this action: rehearse key recovery and avoid distributing keys in scripts.
Tracking principal creation across environments would not correct following remediation, what safeguard BEST prevents a repeat of this specific failure. Rehearse key recovery and avoid distributing keys in scripts.
Expire elevation and log the migration transaction. The current task instead requires this action: rehearse key recovery and avoid distributing keys in scripts.