CompTIA Server+ (SK0-005)Server AdministrationHard
A server administrator is deploying a new web application that will handle sensitive customer data. The application requires robust security measures to protect data both in transit and at rest. Which of the following security protocols and practices should be prioritized for this application?
- AEncrypt data at the application layer only and use FTP for file transfers.
- BOnly use a strong firewall and disable all non-essential ports.
- CImplement HTTPS for web communication and full disk encryption (FDE) for servers.
- DUse HTTP for web communication and rely on database encryption.
Show answer & explanationAnswer & explanation
Correct answer: C. Implement HTTPS for web communication and full disk encryption (FDE) for servers.
HTTPS encrypts data in transit between the client and the web server, protecting it from eavesdropping and tampering. Full Disk Encryption (FDE) encrypts all data stored on the server's hard drives, protecting data at rest from unauthorized access if the physical server or its drives are compromised. Both are critical for sensitive data.
Why the other options are wrong
- A. Encrypting only at the application layer might miss some data, and FTP transmits data in plaintext, which is highly insecure for sensitive file transfers.
- B. A strong firewall and port management are essential for network security but do not encrypt data in transit or at rest, which is critical for sensitive information.
- D. HTTP transmits data in plaintext, making it vulnerable in transit. Relying only on database encryption leaves other data on the server unencrypted.
Data Encryption (In-transit & At-rest)
The process of encoding data to prevent unauthorized access. 'In-transit' encryption protects data as it moves across networks, while 'at-rest' encryption protects data stored on devices.
- HTTPS secures data in transit.
- Full Disk Encryption (FDE) secures data at rest.
- Both are crucial for comprehensive data protection.
Memory trick: Encrypt Everywhere, Every Time