hardMultiple ChoiceObjective-mapped

CRISC Practice Question: The policy requiring TLS 1.2 or higher for all…

Exhibit

Refer to the exhibit.

Exhibit: JSON snippet of a cloud security policy:
{
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::example-bucket/*",
      "Condition": {
        "Bool": {
          "aws:SecureTransport": "true"
        }
      }
    }
  ]
}

The policy requiring TLS 1.2 or higher for all data transmissions is intended to enforce what security control?

⚠ Common exam trap

A common mix-up: candidates confuse 'encryption in transit' with 'encryption at rest' because both involve encryption, but the policy's focus on transmission protocols (TLS) clearly distinguishes it as a network-layer control.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Encryption in transit

The policy explicitly requires TLS 1.2 or higher for all data transmissions, which enforces encryption in transit. This ensures that data is protected from interception or tampering while moving across networks, as opposed to being stored (at rest) or managed via classification or access rules.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Data classification
Why it's wrong here
Data classification is not enforced by this policy.
✗
Access control
Why it's wrong here
Access control is the Effect, but the condition is about transport.
✗
Encryption at rest
Why it's wrong here
This condition does not address encryption at rest.
✓
Encryption in transit
Why this is correct
aws:SecureTransport enforces HTTPS for data in transit.

Go deeper

CRISC Practice Question: The policy requiring TLS 1.2 or higher for all…

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question