nerdexam
CompTIA

CV0-003 · Question #181

A company that provides a cloud-based storage solution for consumers needs to ensure that users' data is encrypted while it is stored on its premises. Which of the following should be used to…

The correct answer is A. SSL. Among the given choices, SSL is the only option that provides actual encryption of data, while the others are hashing or authentication mechanisms that do not protect data confidentiality.

Security

Question

A company that provides a cloud-based storage solution for consumers needs to ensure that users' data is encrypted while it is stored on its premises. Which of the following should be used to accomplish this task?

Options

  • ASSL
  • BHMAC
  • CSHA
  • DRC4

How the community answered

(37 responses)
  • A
    86% (32)
  • B
    8% (3)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Among the given choices, SSL is the only option that provides actual encryption of data, while the others are hashing or authentication mechanisms that do not protect data confidentiality.

ASSLCorrect

SSL (Secure Sockets Layer) is a cryptographic protocol that uses symmetric and asymmetric encryption to protect data confidentiality. Among the available options it is the only choice that performs encryption rather than hashing or authentication. While SSL is commonly associated with data in transit, it represents the encryption mechanism needed to ensure stored consumer data remains unreadable to unauthorized parties.

BHMAC

HMAC (Hash-based Message Authentication Code) is used to verify message integrity and authenticity using a shared secret, but it does not encrypt data and cannot protect the confidentiality of stored information.

CSHA

SHA (Secure Hash Algorithm) is a one-way cryptographic hash function used for integrity verification and digital signatures - it cannot encrypt data or restore original plaintext, so it provides no confidentiality protection.

DRC4

RC4 is a deprecated stream cipher with well-documented cryptographic weaknesses including key-scheduling vulnerabilities that make it fundamentally insecure for protecting stored data in any modern environment.

Concept tested: Selecting encryption protocols for data confidentiality at rest

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview

Topics

#encryption at rest#data security#symmetric encryption#storage security

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice