nerdexam
CompTIA

CV0-002 · Question #181

A company that provides a cloud-based storage solution for consumers needs to ensure that users' data is encrypted while it is stored on its premises. Which of the following should be used to…

The correct answer is A. SSL. For a cloud-based storage solution, SSL/TLS is fundamental for ensuring secure communication of data to and from the premises, which is a critical aspect of overall data security while stored.

Security

Question

A company that provides a cloud-based storage solution for consumers needs to ensure that users' data is encrypted while it is stored on its premises. Which of the following should be used to accomplish this task?

Options

  • ASSL
  • BHMAC
  • CSHA
  • DRC4

How the community answered

(27 responses)
  • A
    93% (25)
  • B
    4% (1)
  • C
    4% (1)

Why each option

For a cloud-based storage solution, SSL/TLS is fundamental for ensuring secure communication of data to and from the premises, which is a critical aspect of overall data security while stored.

ASSLCorrect

SSL (Secure Sockets Layer), now largely superseded by TLS (Transport Layer Security), provides a secure channel for communication over a computer network. For a cloud-based storage solution, SSL/TLS encrypts data as it is transferred to and from the storage premises, protecting it during transit, and often forms part of the secure architecture for accessing and managing stored data, thus contributing to the overall security posture of data at rest.

BHMAC

HMAC (Hash-based Message Authentication Code) is used for data integrity and authentication, ensuring that data has not been tampered with, but it does not provide encryption for data storage.

CSHA

SHA (Secure Hash Algorithm) is a cryptographic hash function used for data integrity and creating digital signatures, not for encrypting data at rest.

DRC4

RC4 is an encryption algorithm that is considered insecure for modern applications and has been deprecated in many protocols, making it an unsuitable choice for current secure storage solutions; moreover, SSL/TLS represents the broader protocol suite providing secure communication for cloud services.

Concept tested: Data encryption protocols for cloud storage

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-security-overview

Topics

#data encryption#data at rest#data in transit#SSL/TLS

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice