mediumMultiple Choice
220-1102 Practice Question: Moving its on-premises email server to a…
A company is moving its on-premises email server to a cloud-based service. The IT manager is concerned about data security and wants to ensure that the email data is encrypted both at rest and in transit. Which cloud service model is the company most likely using?
⚠ Common exam trap
The exam often tests the distinction between IaaS, PaaS, and SaaS by presenting a scenario where a specific application (like email) is being moved, and the trap is that candidates confuse the underlying infrastructure (IaaS) with the service model that actually provides the application (SaaS).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Software as a Service (SaaS)
The company is moving its on-premises email server to a cloud-based service, which means they are using a complete email application delivered over the internet. Software as a Service (SaaS) provides ready-to-use applications like email (e.g., Microsoft 365, Google Workspace) where the provider manages the infrastructure, platform, and application, including encryption at rest (e.g., AES-256) and in transit (e.g., TLS 1.2/1.3). This aligns with the IT manager's concern about data security without the company needing to manage underlying servers or platforms.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Infrastructure as a Service (IaaS)
Why it's wrong here
IaaS provides raw compute, storage and networking; the company still installs, patches and encrypts the mail server and its data stores itself. It is tempting because IaaS gives full control over encryption configuration, and would be correct where the organisation must retain responsibility for the entire mail stack.
- ✗
Platform as a Service (PaaS)
Why it's wrong here
PaaS supplies managed runtimes and middleware, not a hosted mail application with provider-managed encryption of stored mailboxes and transport. It is tempting because PaaS abstracts patching and scaling, and would be correct when the company builds or deploys its own application onto provider-managed platform services.
- ✓
Software as a Service (SaaS)
Why this is correct
SaaS delivers a complete application managed by the provider, which handles encryption at rest and in transit. The company consumes hosted email without managing infrastructure, matching the stem's cloud email migration and its encryption requirements.
- ✗
Desktop as a Service (DaaS)
Why it's wrong here
DaaS delivers virtual desktops to end users, not a mail service, so it cannot provide mailbox encryption at rest or SMTP transport encryption. It is tempting because DaaS centralises data in the provider's datacentre, and would be correct when the requirement is streaming a managed desktop environment to remote or contract workers.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
Related to this question
Learn chapter
Wireless Encryption: WEP, WPA, WPA2, WPA3
Key term
SaaS
Software as a Service (SaaS) is a cloud computing model where you use software over the internet without installing it on your own computer.
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
About these practice questions
This 220-1202 question is part of Courseiva's 687-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.