Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityEasy
A financial institution is implementing a new system for managing customer accounts. They want to ensure that only authorized personnel can view sensitive financial data, even if the data is stolen or accidentally exposed. Which security concept is this scenario primarily addressing?
- AAvailability
- BIntegrity
- CEncryption
- DAuthentication
Show answer & explanationAnswer & explanation
Correct answer: C. Encryption
Encryption transforms data into an unreadable format, ensuring that even if the data is compromised, it remains confidential and unreadable to unauthorized individuals.
Why the other options are wrong
- A. Availability ensures access to data, but doesn't protect it if it falls into the wrong hands.
- B. Integrity focuses on preventing unauthorized modification of data, not protecting it if exposed.
- D. Authentication verifies user identity, but doesn't protect data after it's been accessed or stolen.
Encryption
The process of converting information or data into a code to prevent unauthorized access, ensuring confidentiality.
- Uses algorithms to transform data into ciphertext.
- Requires a key for decryption.
- Protects data at rest and in transit.
Memory trick: Encrypt to Scramble, Decrypt to Understand