From a security perspective, what describes secure caching and data storage optimization?

• A. Ensure caches store only non-sensitive data or are encrypted, with proper cache invalidation, and access controls to prevent sensitive data leakage.
• B. Cache all data regardless of sensitivity to speed up access.
• C. Disable all encryption of cached data.
• D. Always store in plaintext on disk.

Answer: (A)

Caching is a performance feature, but from a security view it must be used carefully to protect data. The best approach is to store only non-sensitive data in caches, or encrypt cached content if sensitive data must be cached. Pair this with robust cache invalidation so that stale or incorrect data isn’t served, and enforce strict access controls to prevent unauthorized reads of cache contents. This combination provides fast access without leaking sensitive information, and it keeps data fresh and protected while cached.

Why the other ideas fall short: caching everything regardless of sensitivity can expose secrets or regulated data if the cache is accessed or breached; disabling encryption in the cache leaves data in clear text in memory or on disk, increasing the risk of leakage; and always storing data in plaintext on disk directly creates a long-term vulnerability, since backups and other systems could still access that data.