CV0-003 · Question #67
Every night a datacenter takes snapshots of each VM and backs them up to a tape which is shipped off to a disaster recovery site once a week. Which of the following can mitigate a security breach if…
The correct answer is C. Hard drive encryption. When physical backup media like tapes are lost or stolen during transport, encrypting the data at the storage level ensures it cannot be read without the decryption key.
Question
Every night a datacenter takes snapshots of each VM and backs them up to a tape which is shipped off to a disaster recovery site once a week. Which of the following can mitigate a security breach if the tapes were to fall out of the shipping vehicle during transport?
Options
- ATransmission level encryption
- BTransport layer encryption
- CHard drive encryption
- DFile level encryption
How the community answered
(26 responses)- A4% (1)
- B8% (2)
- C85% (22)
- D4% (1)
Why each option
When physical backup media like tapes are lost or stolen during transport, encrypting the data at the storage level ensures it cannot be read without the decryption key.
Transmission level encryption protects data traversing a network, not data written to and stored on physical media like backup tapes.
Transport layer encryption (TLS/SSL) secures data during active network communications and has no effect on data at rest on physical tape media.
Hard drive encryption (data-at-rest encryption) encodes all data written to the physical media so that even if tapes are physically recovered by an unauthorized party, the data remains unreadable without the decryption key. This protection is inherent to the media itself and is completely independent of the transport method, directly mitigating the breach scenario described.
File level encryption only protects individually selected files, leaving all other data on the tape exposed if the media is stolen.
Concept tested: Data-at-rest encryption for physical backup media
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest
Topics
Community Discussion
No community discussion yet for this question.