Reviewed by Aditya Kumar · Last reviewed 2026-03-24
**Situation**: Financial/healthcare data requires encryption, access control, auditing. **Action**: (1) Encryption—at rest (AES-256, SSE-KMS), in transit (TLS 1.2+); (2) Access—IAM, RBAC, column/row-level security; (3) Masking—PII anonymization for dev/test; (4) Auditing—access...
Situation: Financial/healthcare data requires encryption, access control, auditing.
Action: (1) Encryption—at rest (AES-256, SSE-KMS), in transit (TLS 1.2+); (2) Access—IAM, RBAC, column/row-level security; (3) Masking—PII anonymization for dev/test; (4) Auditing—access logs, lineage; (5) Compliance—GDPR, HIPAA, SOC2.
Goldman Context: Data residency, retention policies. Principle of least privilege; regular access reviews.
Red Flag: 'We encrypt' without details. Pro-Move: 'KMS for encryption keys; column-level masking in Snowflake for PII; audit logs to SIEM.'
According to DataEngPrep.tech, this is one of the most frequently asked General/Other interview questions, reported at 1 company. DataEngPrep.tech maintains an editor-reviewed database of 1,863 data engineering interview questions across 7 categories.