PrepAway - Latest Free Exam Questions & Answers

Which of the following would provide the strongest protection?

A system administrator has been instructed by the head of security to protect their data at-rest.
Which of the following would provide the strongest protection?

PrepAway - Latest Free Exam Questions & Answers

A.
Prohibiting removable media

B.
Incorporating a full-disk encryption system

C.
Biometric controls on data center entry points

D.
A host-based intrusion detection system

Explanation:

One Comment on “Which of the following would provide the strongest protection?

  1. meac says:

    A simple question with a simple answer:
    Data can be divided into three categories: At rest, in Use and In Transit.
    ** Data at rest generally refers to data stored in persistent storage (disk, tape)
    ** Data in use generally refers to data being processed by a computer central processing unit (CPU) or in random access memory (RAM, also referred to as main memory or simply memory).
    ** Data in transit: Data in transit is defined into two categories, information that flows over the public or untrusted network such as the internet and data which flows in the confines of a private network such as a corporate or enterprise Local Area Network (LAN).

    We are after the answer which provides the STRONGEST Protection to DATA AT REST

    WRONG ANSWERS:
    A..Prohibiting removable media:
    This does nothing for data at rest in a HDD for example

    C…Biometric controls on data center entry points
    Controlling data center entry points with biometrics not only does nothing for data at rest on servers, but will do nothing for Data at rest found at Desktops on user’s desks for example.

    D..A host-based intrusion detection system
    It sounds good at face value, but this only deals with INTRUSIONS.

    So the BEST answer is:
    B.Incorporating a full-disk encryption system
    Full disk encryption can be used to encrypt an entire volume with 128-bit encryption. When the entire volume is encrypted, the data is not accessible to someone who might boot another operating system in an attempt to bypass the computer’s security. Full disk encryption is
    sometimes referred to as hard drive encryption. This would be best to protect data that is at rest.




    0



    0

Leave a Reply