21Explain envelope encryption. Why does nobody encrypt large data by calling KMS directly?▼hardNewJPMorgan ChaseStripeSnowflake◆ premiumDirect encryption hits a 4 KB wall and a shared throughput quota. Envelope encryption routes around both, and the key policy underneath is central to authorizing key use.Open full answer →
30Encryption at rest is switched on everywhere. Where does that checkbox fall short, and how would you design keys properly?▼hard★ EssentialNewStripeJPMorgan ChasePhonePe◆ premiumTrace who can read ciphertext, who can decrypt it and who can administer the keys. Key rotation, rewrapping and data re-encryption solve different problems.Open full answer →
