SG0-001 · Question #581
A storage administrator is auditing an environment and finds that an unknown person accessed the company silo and removed a number of tapes. These tapes had sensitive company IP and PII on them, now p
The correct answer is B. Tape encryption. To prevent unauthorized persons from accessing sensitive data on stolen physical backup tapes, implementing tape encryption is the most effective solution.
Question
A storage administrator is auditing an environment and finds that an unknown person accessed the company silo and removed a number of tapes. These tapes had sensitive company IP and PII on them, now putting the company in a legally precarious situation. Which of the following could the administrator do to ensure that lost data is not usable by an unauthorized person in the future?
Options
- APassword encryption
- BTape encryption
- CDisk encryption
- DNetwork encryption
How the community answered
(32 responses)- A6% (2)
- B88% (28)
- C3% (1)
- D3% (1)
Why each option
To prevent unauthorized persons from accessing sensitive data on stolen physical backup tapes, implementing tape encryption is the most effective solution.
Password encryption protects access to a system or file, but not the data itself once a tape is physically removed and accessed by other means.
Tape encryption directly protects data at rest on physical tapes. If tapes are lost or stolen, the encrypted data is rendered unusable to unauthorized individuals without the encryption key, thereby mitigating data breach risks and ensuring data confidentiality.
Disk encryption protects data on hard drives within a server or storage array, not data written to removable backup tapes.
Network encryption protects data in transit over a network, not data at rest on physical storage media like tapes.
Concept tested: Data at rest encryption for removable media
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest
Topics
Community Discussion
No community discussion yet for this question.