SY0-501 · Question #300
The administrator installs database software to encrypt each field as it is written to disk. Which of the following describes the encrypted data?
The correct answer is D. At-rest. Data security classifications describe where data exists in its lifecycle; data written to disk and encrypted at the field level is considered 'at-rest' because it is stored rather than being transmitted or actively processed.
Question
The administrator installs database software to encrypt each field as it is written to disk. Which of the following describes the encrypted data?
Options
- AIn-transit
- BIn-use
- CEmbedded
- DAt-rest
How the community answered
(58 responses)- A12% (7)
- B5% (3)
- C2% (1)
- D81% (47)
Why each option
Data security classifications describe where data exists in its lifecycle; data written to disk and encrypted at the field level is considered 'at-rest' because it is stored rather than being transmitted or actively processed.
In-transit describes data actively moving across a network between systems or endpoints, which does not apply here since the data is being written to local disk storage.
In-use describes data that is actively being processed in memory or CPU registers, not data that has been written and stored to disk.
Embedded is not a standard data security state classification; data security states are defined as at-rest, in-transit, and in-use.
Data at-rest refers to data that is stored on a persistent medium such as a hard drive, SSD, or database. When the database software encrypts each field as it is written to disk, the resulting encrypted data resides in storage and is not actively moving across a network or being processed in memory, making 'at-rest' the correct classification. Field-level encryption in databases is a common at-rest encryption technique to protect stored sensitive data.
Concept tested: Data states: at-rest, in-transit, in-use
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest
Topics
Community Discussion
No community discussion yet for this question.