100-160 Question 50
Select 3A cybersecurity analyst is tasked with ensuring sensitive customer data remains secure when it is transmitted over the network, stored on servers, and actively processed in memory. Which of the following protocols or technologies can be used to encrypt data in transit, at rest, and in use?
- A
TLS (Transport Layer Security)
- B
AES (Advanced Encryption Standard)
- C
BitLocker
- D
Homomorphic Encryption
- E
FTP (File Transfer Protocol)
Show answer and explanation
Correct answers: A, B, D
Explanation
The security of data in transit, at rest, and in use requires different technologies. TLS ensures encryption during transmission over networks, AES secures data stored on devices or databases, and Homomorphic Encryption protects data while being processed. BitLocker only addresses data at rest, and FTP lacks encryption, making it unsuitable for secure data handling.
- A. Correct.
TLS (Transport Layer Security) is used to encrypt data in transit, such as during secure web browsing or transmitting sensitive information over a network.
- B. Correct.
AES (Advanced Encryption Standard) is a widely used encryption standard for securing data at rest, such as on hard drives or within databases.
- C. Incorrect.
BitLocker is a full disk encryption tool used to secure data at rest on a device, but it does not protect data during transmission or while it is in use.
- D. Correct.
Homomorphic Encryption is an advanced encryption method that allows computations to be performed on encrypted data without decrypting it, making it suitable for protecting data in use.
- E. Incorrect.
FTP (File Transfer Protocol) does not provide encryption by itself and is considered insecure for transmitting sensitive data.