# Before We Start ... Try to Identify the CORRECT Statement(s):
+ 1. `PingCAP` offers two types of `Cloud DBaaS` in `TiDB Cloud`: TiDB Serverless and TiDB Dedicated.
+ 2. Data in `TiDB Cloud` databases are replicated across multiple cloud regions automatically.
+ 3. TiDB Dedicated meets SOC 2 Type II, ISO 27001, ISO 27701, GDPR, PCI DSS and HIPAA standards and requirements.
+ 4. Data in `TiDB Cloud` databases are always encrypted.
+ 5. Upgrading the version of `TiDB Cloud` Dedicated is the responsibility of the customer.
+ 6. `PingCAP` manages `TiDB Cloud` data encryption keys.

------------------------------------------------------------------------------
This slide provides an opportunity to test your understanding of `TiDB Cloud`. Here are the answers:

1. `PingCAP` offers two types of `Cloud DBaaS` in `TiDB Cloud`: TiDB Serverless and TiDB Dedicated. `True`
- Please visit `https://www.pingcap.com/get-started-tidb/` for more information on the TiDB offerings provided by `PingCAP`.

2. Data in `TiDB Cloud` databases are replicated across multiple cloud regions automatically. `False`
- Data in `TiDB Cloud` databases are replicated automatically across three availability zones within single cloud region.

3. TiDB Dedicated meets SOC 2 Type II, ISO 27001, ISO 27701, GDPR, PCI DSS and HIPAA standards and requirements. `True`
- Please visit `https://www.pingcap.com/trust-compliance-center/` for more information about 3rd-party auditing.

4. Data in `TiDB Cloud` databases are always encrypted. `True`

5. Upgrading the version of `TiDB Cloud` Dedicated is the responsibility of the customer. `False`, `PingCAP` and customer share the responsibility.
- To submit an upgrade request, perform the steps in `TiDB Cloud` Support to contact our support team. Please refer to `https://docs.pingcap.com/tidbcloud/upgrade-tidb-cluster#upgrade-a-tidb-cluster`.
- For the TiDB Dedicated version End-of-life, `TiDB Cloud` will provide the upgrade schedule, and notify users via email before and after the upgrade.

6. `PingCAP` manages `TiDB Cloud` data encryption keys. `False`
- Data encryption keys are managed by key management services and integrated storage services provided by the Cloud Infrastructure Vendors (AWS/GCP), such as Amazon EBS, GCP Persistent Disk, Amazon S3 and GCP Cloud Storage Service. If the customer chooses to use Customer Managed Encryption Key (CMEK) in TiDB Dedicated, the customer will be responsible for managing the encryption keys.

In addition, penetration testing is a violation of `TiDB Cloud` Services Agreement.