Machine-translated by Google. Questions are authored in English.
Top

Discussion

Encryption at rest in a cloud storage service

  • A.removes any need for access control
  • B.protects the media but not a valid credential
  • C.prevents all unauthorised access altogether
  • D.encrypts the data while in transit

Answer: B

Correct answer: protects the media but not a valid credential

Encryption at rest defends against the physical layer - a stolen or decommissioned disk, a mislaid backup. It does nothing against a request bearing valid credentials, because the service decrypts on the way out as a matter of course. Access control, key management and audit are what defend against that, which is why encryption at rest is a compliance baseline rather than a security strategy.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.