nerdexam
CompTIA

CAS-003 · Question #321

An organization's network engineering team recently deployed a new software encryption solution to ensure the confidentiality of data at rest, which was found to add 300ms of latency to data read-writ

The correct answer is A. Employ hardware FDE or SED solutions.. SEDs have integrated encryption hardware, so the result: zero performance impact. For data intensive applications such as scans, backup, and large file operations, SEDs can provide more than double the drive performance of software FDE products.

Enterprise Security Architecture

Question

An organization's network engineering team recently deployed a new software encryption solution to ensure the confidentiality of data at rest, which was found to add 300ms of latency to data read-write requests in storage, impacting business operations. Which of the following alternative approaches would BEST address performance requirements while meeting the intended security objective?

Options

  • AEmploy hardware FDE or SED solutions.
  • BUtilize a more efficient cryptographic hash function.
  • CReplace HDDs with SSD arrays.
  • DUse a FIFO pipe a multithreaded software solution.

How the community answered

(50 responses)
  • A
    80% (40)
  • B
    4% (2)
  • C
    6% (3)
  • D
    10% (5)

Explanation

SEDs have integrated encryption hardware, so the result: zero performance impact. For data intensive applications such as scans, backup, and large file operations, SEDs can provide more than double the drive performance of software FDE products.

Topics

#full disk encryption#hardware FDE#data at rest#storage performance

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice