CompTIA Cloud Essentials+ (CLO-002)Management and Technical OperationsEasy
A cloud administrator is configuring a new storage solution for highly sensitive customer data. Regulatory compliance requires that data be encrypted both when it is stored on disk and when it is being transmitted across the network to and from the storage service. Which combination of encryption types must be implemented?
- AEncryption at rest only
- BHomomorphic encryption
- CEncryption at rest and encryption in transit
- DEncryption in transit only
Show answer & explanationAnswer & explanation
Correct answer: C. Encryption at rest and encryption in transit
To meet the requirement of encrypting data both on disk and during network transmission, both encryption at rest and encryption in transit must be implemented.
Why the other options are wrong
- A. Encryption at rest only protects data when stored on disk, leaving it vulnerable during network transmission.
- B. Homomorphic encryption allows computations on encrypted data but is not typically used for general data storage and transit encryption in this context.
- D. Encryption in transit only protects data during network transmission, leaving it vulnerable when stored.
Data Encryption Types
Methods of securing data by transforming it into an unreadable format, categorized by whether the data is stored or being transmitted.
- Encryption at Rest: Data is encrypted when stored on physical media.
- Encryption in Transit: Data is encrypted when moving across networks.
- Both are often required for comprehensive security.
Memory trick: Resting data is safe, Traveling data is safe.