An organization has an initiative to implement database encryption to strengthen privacy controls. Which of the following is the MOST useful…

The most useful information for prioritizing database selection for encryption is the asset

classification scheme. An asset classification scheme is a system of organizing and categorizing assets

based on their value, sensitivity, criticality, or risk level. An asset classification scheme helps to

determine the appropriate level of protection or handling for each asset. For example, an asset

classification scheme may assign labels such as public, internal, confidential, or secret to different

types of data based on their impact if compromised. Databases that contain higher-classified data

should be prioritized for encryption to prevent unauthorized access, disclosure, or modification.

Database administration audit logs, historical security incidents, or penetration test results are also

useful information for database security, but they are not the most useful for prioritizing database

selection for encryption. Database administration audit logs are records of activities performed by

database administrators or other privileged users on the database system. Database administration

audit logs help to monitor and verify the actions and changes made by authorized users and detect

any anomalies or violations. Historical security incidents are records of events that have

compromised or threatened the security of the database system in the past. Historical security

incidents help to identify and analyze the root causes, impacts, and lessons learned from previous

breaches or attacks. Penetration test results are reports of simulated attacks performed by ethical

hackers or security experts on the database system to evaluate its vulnerabilities and defenses.

Penetration test results help to discover and exploit any weaknesses or gaps in the database security

posture and recommend remediation actions.

Reference: Data Classification Policy - SANS Institute, Database Security Best Practices - Oracle,

[Database Security: An Essential Guide | IBM]