Episode 56 — 5.3 Protect Sensitive Data: RBAC, Encryption in Transit, Encryption at Rest

This episode explains how DA0-002 expects you to think about protecting sensitive data using layered controls that reduce exposure without blocking legitimate work. You will define sensitive data in terms of classification and impact, then connect that definition to access control and encryption decisions. Role-based access control is covered as the mechanism for aligning permissions to job responsibilities, supporting least privilege so users see only what they need. Encryption in transit is framed as protection for data moving across networks, while encryption at rest protects stored copies, including databases, object storage, and backups. You will also address why key management matters, because encryption strength depends on how keys are generated, stored, and rotated. The goal is to recognize control cues in prompts and to select protections that match risk, environment, and data lifecycle.