When enabling Field-Level Encryption for your Marketing Cloud account, which statement correctly describes how data is handled after import?

When enabling Field-Level Encryption for your Marketing Cloud account, which statement correctly describes how data is handled after import?

• A. You encrypt your data and import it into your Marketing Cloud account. Any extracted or exported data remains encrypted.
• B. You import plain text data into your Marketing Cloud account, which encrypts that data as part of the import process. Marketing Cloud then decrypts any extracted or exported data.
• C. You display data in Preview, landing pages, View as Webpage, Forward to a Friend, platform apps, and Send Logging in unencrypted text. By default, the Marketing Cloud encrypts this data.
• D. All data is stored in encrypted form and cannot be exported.

Answer: (A)

Field-Level Encryption protects sensitive fields by keeping them encrypted at rest, and that protection travels with the data as it moves through Marketing Cloud. When you enable FLE, you either provide or generate the encryption for the fields, and the data is stored in an encrypted form. Any data you export or extract remains encrypted, so plaintext cannot be obtained from these downstream processes unless you decrypt it outside Marketing Cloud with the proper keys. This design prioritizes keeping sensitive information protected even when data is moved out of the platform. In other words, encrypted data stays encrypted during import and during exports, which is why the correct description emphasizes that you encrypt the data before import and exported data remains encrypted.

Field-Level Encryption protects sensitive fields by keeping them encrypted at rest, and that protection travels with the data as it moves through Marketing Cloud. When you enable FLE, you either provide or generate the encryption for the fields, and the data is stored in an encrypted form. Any data you export or extract remains encrypted, so plaintext cannot be obtained from these downstream processes unless you decrypt it outside Marketing Cloud with the proper keys. This design prioritizes keeping sensitive information protected even when data is moved out of the platform.

In other words, encrypted data stays encrypted during import and during exports, which is why the correct description emphasizes that you encrypt the data before import and exported data remains encrypted.