Citizen PII volumes for a benefits app must use encryption and must not be reachable over the public internet. What should provisioning enforce?
Select an answer to reveal the explanation.
Short Explanation
Citizen PII is the locked filing cabinet in a room with no street door—encrypt it and keep the network path private. Public ACLs and cleartext disks miss both marks.
Full Explanation
Security requirements for regulated PII commonly mandate encryption at rest and restricted network exposure such as private endpoints or private connectivity rather than public internet access. Provisioning must select storage and networking options that meet those controls. Public ACLs and cleartext exposure conflict with that posture.