CompTIA DataSys+ (DS0-001)Data and Database SecurityEasy
A financial services company is implementing a new database system to store sensitive customer data, including account numbers and transaction histories. The company's compliance regulations require that this data be protected from unauthorized access, even if the underlying storage media is compromised. Which of the following security measures would best address this requirement for data at rest?
- AEncrypting the database files and backups using strong encryption algorithms.
- BConfiguring multi-factor authentication for all database administrators.
- CRegularly patching the operating systems and database software for known vulnerabilities.
- DImplementing a robust firewall to restrict network access to the database servers.
Show answer & explanationAnswer & explanation
Correct answer: A. Encrypting the database files and backups using strong encryption algorithms.
Encrypting data at rest ensures that even if the storage media is stolen or compromised, the data remains unreadable without the decryption key, directly addressing the requirement for protection against unauthorized access to the underlying storage.
Why the other options are wrong
- B. MFA strengthens access control for administrators but doesn't inherently protect data on compromised physical storage.
- C. Patching prevents exploitation of software vulnerabilities but doesn't prevent data exposure if the physical storage itself is compromised.
- D. Firewalls protect against unauthorized network access but do not protect data once it is at rest on a compromised storage medium.
Encryption at Rest
The process of encoding data when it is stored on a physical medium (e.g., hard drives, backup tapes) to protect it from unauthorized access.
- Protects data even if the storage device is stolen or compromised.
- Requires a decryption key to access the original data.
- Commonly used for sensitive data on databases, file systems, and backups.
Memory trick: Resting data needs a lock, like a safe for a sleeping treasure.