Which of the following is the preferred type of encryption used in SaaS platforms?

Which of the following is the preferred type of encryption used in SaaS platforms?

• Media level
• Database level
• Application level
• HSM level 

EXPLANATION

In a SaaS environment, application-level encryption is preferred because the data is encrypted by the application before being stored in the database or file system. The advantage is that it protects the data from the user all the way to storage. HSM Level is incorrect because an HSM solution is mainly found in private data centers that manage and offload cryptography with dedicated hardware appliances. Media Level is incorrect because encryption of a complete virtual machine on IaaS could be considered media encryption. Database level is incorrect because, due to the complexity involved, data should be encrypted at the application layer in cloud implementations rather than being encrypted within a database.