Which security concept, if implemented correctly, will protect the data on a system, even if a malicious actor gains access to the actual system?

The correct answer is B. Encryption. Encryption transforms data into ciphertext that is unreadable without the correct decryption key. If a system is physically or logically compromised, encrypted data remains protected as long as the attacker does not have the key. Sandboxing (A) isolates processes but does not pro

Submitted by diego_uy· Apr 18, 2026Cloud Data Security

Question

Options

ASandboxing
BEncryption
CFirewalls
DAccess control

How the community answered

(32 responses)

B
94% (30)
C
3% (1)
D
3% (1)

Explanation

Encryption transforms data into ciphertext that is unreadable without the correct decryption key. If a system is physically or logically compromised, encrypted data remains protected as long as the attacker does not have the key. Sandboxing (A) isolates processes but does not protect the underlying data from a privileged attacker. Firewalls (C) control network access but provide no protection once an attacker is already on the system. Access control (D) restricts who can reach the data but is bypassed if the attacker gains sufficient privileges.

Topics

#Encryption#Data Protection#Security Controls#Data at Rest

Community Discussion

No community discussion yet for this question.

Full CCSP Practice