nerdexam
CompTIA

SG0-001 · Question #62

Which of the following encryption methods is being described when a secure encrypted tunnel is created between a host and a storage device, but the data stored on disk is not encrypted?

The correct answer is D. Data In-Flight Encryption. When a secure encrypted tunnel is established between a host and a storage device for data transfer, but the data itself is not encrypted once it's written to disk, this describes data in-flight encryption.

Storage Functionality

Question

Which of the following encryption methods is being described when a secure encrypted tunnel is created between a host and a storage device, but the data stored on disk is not encrypted?

Options

  • AData At-Rest Encryption
  • BHost Encryption
  • CNetwork Encryption
  • DData In-Flight Encryption

How the community answered

(28 responses)
  • A
    4% (1)
  • C
    4% (1)
  • D
    93% (26)

Why each option

When a secure encrypted tunnel is established between a host and a storage device for data transfer, but the data itself is not encrypted once it's written to disk, this describes data in-flight encryption.

AData At-Rest Encryption

Data At-Rest Encryption specifically refers to encrypting data when it is stored on persistent media, which is explicitly stated not to be the case in this scenario.

BHost Encryption

Host Encryption is a broader term; while a host performs in-flight encryption, this option does not specifically capture the 'encrypted tunnel' and 'not stored on disk' aspects as accurately as 'Data In-Flight Encryption'.

CNetwork Encryption

While network encryption is the mechanism, 'Data In-Flight Encryption' is the more precise and commonly used term to describe the protection of data while it traverses the network.

DData In-Flight EncryptionCorrect

Data In-Flight Encryption (or data in-transit encryption) secures data while it is moving across a network between two points, such as a host and a storage device, often using protocols that create an encrypted tunnel. This method specifically protects the data during transmission, without necessarily encrypting the data at rest on the storage device.

Concept tested: Types of data encryption - in-flight vs at-rest

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview#encryption-at-rest-in-transit-and-in-use

Topics

#data encryption#in-flight encryption#network encryption

Community Discussion

No community discussion yet for this question.

Full SG0-001 Practice