Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityEasy
A financial institution is implementing a new system for managing customer accounts. They need to ensure that customer data remains unreadable to unauthorized parties, even if the storage system is breached. What security concept directly addresses this requirement?
- AIntegrity
- BEncryption
- CNon-repudiation
- DAvailability
Show answer & explanationAnswer & explanation
Correct answer: B. Encryption
Encryption transforms data into a coded format to prevent unauthorized access. If a system is breached, encrypted data remains unreadable without the correct decryption key.
Why the other options are wrong
- A. Integrity ensures data has not been tampered with, not that it's unreadable to unauthorized parties.
- C. Non-repudiation ensures that the origin of data or actions cannot be denied, which is unrelated to data readability after a breach.
- D. Availability ensures data and systems are accessible when needed, which is not the primary concern here.
Encryption
The process of converting information or data into a code to prevent unauthorized access.
- Protects data confidentiality.
- Makes data unreadable without a key.
- Can be applied to data at rest or in transit.
Memory trick: CIA Triad and More