Tri-Secret Secure, which enables customer-managed encryption keys, is supported in which editions?

• A. Enterprise
• B. Business Critical or VPS
• C. VPS
• D. Standard

Answer: (B)

Tri-Secret Secure is an enhanced form of customer-managed encryption keys (CMEK) that adds a third, independent key to the key-handling flow. This extra key provides an additional layer of protection so that decryption can’t occur unless that separate third key is present, giving you stronger control and separation of duties over encryption keys.

This level of security capability is available only in the higher-security editions: Business Critical and VPS. It isn’t included in the Standard edition, and thus Tri-Secret Secure can’t be enabled there.