Select ALL tools or safeguards named in the lesson that could be relevant to protecting an e-commerce application.

### Why this is right - **Encryption** can protect sensitive information by encoding it so it is not readily readable without the appropriate key. - **Multifactor authentication** adds an authentication requirement beyond a password. - **Firewall** is a technical control listed in the lesson. - **Security information and event management system** is among the common cybersecurity tools listed and supports security monitoring. ### The concept The e-commerce example handles sensitive credentials and payment information and has a strong availability requirement. A collection of controls can address different risks, but each control needs to fit the system and be managed. Monitoring is part of ongoing security work, not something to discard when availability matters. ### The other options - **Ignoring monitoring because the application is available**: availability does not show that the application is secure; monitoring is needed to identify new threats and problems. ### Terms - **Encryption**: transforming readable information into a protected form that requires a key to read. - **Multifactor authentication**: requiring more than one kind of evidence to verify a user. - **Security information and event management system**: a system that collects and organizes security-related events to support monitoring. ### Remember Choose complementary safeguards for the specific risks; do not trade away monitoring without a reason.