Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityEasy
A small business is setting up its cloud environment and wants to ensure that data remains unreadable to unauthorized individuals, even if they gain access to the storage location. Which security concept directly addresses this requirement?
- AAvailability
- BAccountability
- CEncryption
- DIntegrity
Show answer & explanationAnswer & explanation
Correct answer: C. Encryption
Encryption is the process of converting data into a coded format to prevent unauthorized access, making it unreadable without the correct decryption key.
Why the other options are wrong
- A. Availability ensures that data and systems are accessible to authorized users when needed, not that they are unreadable to unauthorized users.
- B. Accountability tracks who performed actions, but doesn't inherently make data unreadable to an unauthorized viewer.
- D. Integrity focuses on preventing unauthorized modification of data, not unauthorized viewing.
Encryption
Encryption is the process of encoding information in such a way that only authorized parties can access it and those who are not authorized cannot.
- Transforms data into ciphertext.
- Requires a key for decryption.
- Protects data confidentiality at rest and in transit.
Memory trick: CIA Triad and its tools guard data.