Encryption, Governance, and Data Protection

Where this lesson fits

This lesson covers Domain 1: Design Secure Architectures, Task 1.3: Determine appropriate data security controls. Domain 1 carries 30% of the scored content of the SAA-C03 exam, the largest weight of the four domains. Task 1.3 is where the exam stops asking "who may call this API?" and starts asking "what happens to the data itself?": how it is encrypted at rest and in transit, who controls the keys, how it is backed up and replicated, how long it is kept, and how you prove that nobody tampered with it.

Learning objectives

After this lesson you will be able to: