Discuss Data Protection in PowerEdge Servers (SEDs) POWEREDGE-FOUNDATIONS-V2 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A large enterprise is deploying SEDs across hundreds of PowerEdge servers. They need to centrally manage encryption keys and quickly revoke access to data if an employee leaves the company. Which key management approach should they implement?

   • ADisable SED encryption and rely on OS-level encryption
   • BUse the same password for all SEDs and store it in a spreadsheet
   • CLocal key management using the RAID controller's built-in key storage
   • DExternal key manager (EKM) using a centralized key management server
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is deploying PowerEdge servers with SEDs and wants to ensure that if a drive is physically removed and installed in another system, the data remains inaccessible. They plan to use the SED's built-in encryption capabilities. What is the most effective way to achieve this?

   • ASet a strong password on the SED and enable the security feature in the RAID controller
   • BFormat the drive with a standard filesystem and rely on the OS-level encryption
   • CUse the drive's Instant Secure Erase feature before removal
   • DRely on the drive's default encryption key that is automatically generated at manufacturing
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A server administrator is configuring SEDs in a PowerEdge server and wants to ensure that the drives automatically unlock when the server boots, but only if the server is in a trusted environment. They plan to use a password. What is the best way to achieve this?

   • AUse the same password for all SEDs and enter it manually at each boot
   • BStore the SED password in the RAID controller's non-volatile memory
   • CDisable SED security and rely on the operating system's encryption
   • DSet the SED password to blank
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does a Self-Encrypting Drive (SED) protect data at rest?

   • AIt uses asymmetric encryption for all data at rest
   • BIt uses a symmetric encryption key stored in the drive's controller to encrypt all data written to the media
   • CIt encrypts data only when the drive is idle
   • DIt relies on the server's CPU to encrypt data before writing
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A hospital is deploying PowerEdge servers to store electronic health records (EHR). They must comply with HIPAA, which requires encryption of data at rest. The IT director is concerned about the performance impact of encryption on their high-transaction database. Which solution best addresses both compliance and performance?

   • AUse SEDs but disable encryption to improve performance
   • BDeploy SEDs in the servers
   • CUse software encryption on standard drives
   • DUse unencrypted drives and rely on network security
   Reveal Solution Discussion Select an answer first