Exam CCSP topic 1 question 329 discussion

When focusing on regulatory compliance in cloud environments, the primary concerns revolve around the security and privacy of data in its various states (in transit, in use, and at rest). These three states are critical for encryption, access control, and compliance with regulations like GDPR, HIPAA, and PCI DSS. Why Not the Others? A. Data in transit: Needs encryption and secure transmission protocols for compliance. B. Data in use: Security controls (e.g., memory encryption, processing safeguards) must be in place while data is being accessed or processed. C. Data at rest: Must be encrypted and protected through access controls, backup policies, and data retention rules. Why "Data Custodian" Is Not a Major Focus? Data Custodian refers to an operational role responsible for managing and safeguarding data but is not a regulatory compliance focus by itself. Regulatory frameworks emphasize data protection mechanisms rather than specific job roles like a data custodian.

D. Data custodian