The primary function ofData Encryption Keys (DEK)in cloud security is toencrypt application data. DEKs are used to encrypt and decrypt specific data objects, such as files or database records, ensuring data confidentiality in cloud environments.

From theCCSK v5.0 Study Guide, Domain 10 (Data Security and Encryption), Section 10.3:

“Data Encryption Keys (DEKs) are used to encrypt and decrypt application data in cloud environments. DEKs are typically managed by key management services and applied to specific data objects to ensure confidentiality and protect against unauthorized access.”

Option B (To encrypt application data) is the correct answer.

Option A (Increase speed) is incorrect because encryption does not enhance performance.

Option C (Manage user access control) is incorrect because DEKs are for encryption, not access control.

Option D (Primary key for all resources) is incorrect because DEKs are specific to data encryption, not resource management.