CV0-003 · Question #139
Which of the following encryption types would be used to protect company information when stored on a cloud server being shared by multiple companies?
The correct answer is D. File and folder level encryption. File and folder level encryption protects individual companies' data at rest on shared cloud infrastructure by ensuring cryptographic isolation per tenant.
Question
Which of the following encryption types would be used to protect company information when stored on a cloud server being shared by multiple companies?
Options
- ASecure socket layer encryption
- BTransport layer security encryption
- CWhole disk encryption
- DFile and folder level encryption
How the community answered
(33 responses)- A3% (1)
- C3% (1)
- D94% (31)
Why each option
File and folder level encryption protects individual companies' data at rest on shared cloud infrastructure by ensuring cryptographic isolation per tenant.
SSL (Secure Socket Layer) is a deprecated transport-layer protocol that encrypts data in transit between client and server over a network - it provides no protection for data already stored at rest.
TLS (Transport Layer Security) also secures data during network transmission only and does not protect data that is sitting idle on a storage device.
Whole disk encryption protects a disk against unauthorized physical access, but on a shared cloud server all tenants share the same encrypted disk, so once the disk is mounted and decrypted by the provider, one tenant's data is not isolated from another's.
File and folder level encryption encrypts individual files or directories with keys controlled by their respective owners, so even when multiple companies share the same physical or virtual cloud storage, each company's data remains cryptographically isolated and unreadable to other tenants. This granular approach is the appropriate choice for multi-tenant environments because it provides data-level separation that whole-disk or transport encryption cannot offer on shared hardware.
Concept tested: Data-at-rest encryption in multi-tenant cloud environments
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest
Topics
Community Discussion
No community discussion yet for this question.