CV0-002 · Question #181
A company that provides a cloud-based storage solution for consumers needs to ensure that users' data is encrypted while it is stored on its premises. Which of the following should be used to…
The correct answer is A. SSL. For a cloud-based storage solution, SSL/TLS is fundamental for ensuring secure communication of data to and from the premises, which is a critical aspect of overall data security while stored.
Question
A company that provides a cloud-based storage solution for consumers needs to ensure that users' data is encrypted while it is stored on its premises. Which of the following should be used to accomplish this task?
Options
- ASSL
- BHMAC
- CSHA
- DRC4
How the community answered
(27 responses)- A93% (25)
- B4% (1)
- C4% (1)
Why each option
For a cloud-based storage solution, SSL/TLS is fundamental for ensuring secure communication of data to and from the premises, which is a critical aspect of overall data security while stored.
SSL (Secure Sockets Layer), now largely superseded by TLS (Transport Layer Security), provides a secure channel for communication over a computer network. For a cloud-based storage solution, SSL/TLS encrypts data as it is transferred to and from the storage premises, protecting it during transit, and often forms part of the secure architecture for accessing and managing stored data, thus contributing to the overall security posture of data at rest.
HMAC (Hash-based Message Authentication Code) is used for data integrity and authentication, ensuring that data has not been tampered with, but it does not provide encryption for data storage.
SHA (Secure Hash Algorithm) is a cryptographic hash function used for data integrity and creating digital signatures, not for encrypting data at rest.
RC4 is an encryption algorithm that is considered insecure for modern applications and has been deprecated in many protocols, making it an unsuitable choice for current secure storage solutions; moreover, SSL/TLS represents the broader protocol suite providing secure communication for cloud services.
Concept tested: Data encryption protocols for cloud storage
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-security-overview
Topics
Community Discussion
No community discussion yet for this question.