nerdexam
CompTIA

CV0-003 · Question #139

Which of the following encryption types would be used to protect company information when stored on a cloud server being shared by multiple companies?

The correct answer is D. File and folder level encryption. File and folder level encryption protects individual companies' data at rest on shared cloud infrastructure by ensuring cryptographic isolation per tenant.

Security

Question

Which of the following encryption types would be used to protect company information when stored on a cloud server being shared by multiple companies?

Options

  • ASecure socket layer encryption
  • BTransport layer security encryption
  • CWhole disk encryption
  • DFile and folder level encryption

How the community answered

(33 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    94% (31)

Why each option

File and folder level encryption protects individual companies' data at rest on shared cloud infrastructure by ensuring cryptographic isolation per tenant.

ASecure socket layer encryption

SSL (Secure Socket Layer) is a deprecated transport-layer protocol that encrypts data in transit between client and server over a network - it provides no protection for data already stored at rest.

BTransport layer security encryption

TLS (Transport Layer Security) also secures data during network transmission only and does not protect data that is sitting idle on a storage device.

CWhole disk encryption

Whole disk encryption protects a disk against unauthorized physical access, but on a shared cloud server all tenants share the same encrypted disk, so once the disk is mounted and decrypted by the provider, one tenant's data is not isolated from another's.

DFile and folder level encryptionCorrect

File and folder level encryption encrypts individual files or directories with keys controlled by their respective owners, so even when multiple companies share the same physical or virtual cloud storage, each company's data remains cryptographically isolated and unreadable to other tenants. This granular approach is the appropriate choice for multi-tenant environments because it provides data-level separation that whole-disk or transport encryption cannot offer on shared hardware.

Concept tested: Data-at-rest encryption in multi-tenant cloud environments

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest

Topics

#file-level encryption#folder encryption#multi-tenant cloud#data at rest

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice