Reviewed by Aditya Kumar · Last reviewed 2026-03-24
Security is layered: (1) Encryption: At rest (KMS-managed keys, SSE-S3, Azure Storage encryption) and in transit (TLS). Why: Compliance (GDPR, HIPAA) and breach mitigation. Trade-off: Key management adds latency and complexity; managed services reduce operational burden. (2)...
Red Flag: 'We use encryption' with no mention of key management or compliance framework. Pro-Move: Naming HIPAA/GDPR, managed keys, and policy-as-code—shows governance maturity.
This easy-level Cloud/Tools question appears frequently in data engineering interviews at companies like EPAM, Infosys. While less common, it tests deeper understanding that distinguishes strong candidates.
Start by clearly defining the core concept being asked about. Interviewers want to see that you understand the fundamentals before diving into implementation details. Structure your answer with a definition, then explain the practical application with a concise example.
Security is layered: (1) Encryption: At rest (KMS-managed keys, SSE-S3, Azure Storage encryption) and in transit (TLS). Why: Compliance (GDPR, HIPAA) and breach mitigation. Trade-off: Key management adds latency and complexity; managed services reduce operational burden. (2) Access: Least-privilege IAM, role-based access, no long-lived keys in code. Use VPC/VNet for network isolation; private endpoints for data stores. (3) Data protection: Mask or tokenize PII; use column-level security in warehouses. (4) Auditing: CloudTrail, GuardDuty, data lineage in a catalog. Cost: Encryption is low; auditing and masking can add 10–20% to pipeline cost. Scalability: Use policy-as-code (Terraform) and automated compliance checks in CI. At scale, a central data governance layer (e.g., Unity Catalog, Lake Formation) reduces duplication and audit drift.
Red Flag: 'We use encryption' with no mention of key management or compliance framework. Pro-Move: Naming HIPAA/GDPR, managed keys, and policy-as-code—shows governance maturity.
Practice the 39 most asked data engineering questions at Infosys. Covers Spark/Big Data, Python/Coding, Cloud/Tools and more.
8 min read →Master 179 cloud/tools questions with expert answers. Real questions from 97+ companies.
22 min read →Some links below are affiliate links. If you buy through them we may earn a small commission at no extra cost to you — it helps keep DataEngPrep free.
According to DataEngPrep.tech, this is one of the most frequently asked Cloud/Tools interview questions, reported at 2 companies. DataEngPrep.tech maintains an editor-reviewed database of 1,863 data engineering interview questions across 7 categories.