CompTIA Project+ (PK0-005)Basics of IT and GovernanceMedium
A project involves developing a new mobile application that will collect and process user location data. To comply with data privacy regulations, the project manager must ensure that this sensitive data is protected both in transit and at rest. Which security measure is most appropriate for achieving this objective?
- ARegular vulnerability scanning
- BData encryption
- CIntrusion detection system (IDS)
- DFirewall configuration
Show answer & explanationAnswer & explanation
Correct answer: B. Data encryption
Data encryption is the most effective security measure for protecting sensitive data both when it is being transmitted (in transit) and when it is stored (at rest), as it renders the data unreadable to unauthorized parties.
Why the other options are wrong
- A. Vulnerability scanning identifies weaknesses but doesn't provide direct data protection like encryption does.
- C. IDS monitors for malicious activity but does not directly protect data at rest or actively encrypt data in transit.
- D. Firewalls control network traffic but don't inherently protect data itself once it passes through or is at rest.
Data Encryption
The process of converting information or data into a code to prevent unauthorized access, protecting it both when it's being sent across a network (in transit) and when it's stored on a device (at rest).
- Protects data confidentiality.
- Uses cryptographic algorithms.
- Essential for sensitive data compliance.
Memory trick: Encrypt everything to Keep info Private.