27Explain envelope encryption. Why does nobody encrypt large data by calling KMS directly?▼hardJPMorgan ChaseStripeSnowflake○ sign inDirect encryption hits a 4 KB wall and a shared throughput quota. Envelope encryption routes around both, and the key policy underneath is central to authorizing key use.Open full answer →
33Encryption at rest is switched on everywhere. Where does that checkbox fall short, and how would you design keys properly?▼hard★ EssentialStripeJPMorgan ChasePhonePe◆ premiumTrace who can read ciphertext, who can decrypt it and who can administer the keys. Key rotation, rewrapping and data re-encryption solve different problems.Open full answer →
