Chose all true best practices to ensure the security of sensitive data when it comes to encryption: (Choose all applicable) [1 mark]

	a.	Encrypt data in motion at the client network using SSL/TLS or VPN tunnels for non-web-based applications.
	b.	When the data is at rest on the enterprise premises or in the cloud it does not need to be encrypted.
	c.	All data should be encrypted using approved algorithms and long random encryption keys.
	d.	The cloud provider and its staff should never have direct access to the decryption keys.
	e.	A trustworthy cloud provider may have access to the decryption keys and will be considered liable in case of a security breach of the data.