022.4 Data Storage Encryption (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of a key escrow in storage encryption?

   • ATo securely store encryption keys so that they can be recovered if the original key is lost
   • BTo encrypt the encryption key with a weaker algorithm to speed up decryption
   • CTo allow multiple users to share the same encryption key
   • DTo generate a new encryption key every time the system is rebooted
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which scenario best illustrates the importance of encryption at rest?

   • AA laptop containing customer records is stolen from an employee's car
   • BA company regularly backs up its data to an external hard drive
   • CAn organization uses strong passwords for all user accounts
   • DA database server is protected by a firewall that blocks all external network traffic
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has a server with multiple disks. One disk contains the operating system, and another contains sensitive application data. The security policy requires that the application data be encrypted, but the OS disk does not need encryption. Which approach is most appropriate?

   • AUse eCryptfs to encrypt the application data files.
   • BUse file permissions to restrict access to the application data.
   • CEncrypt the OS disk using LUKS.
   • DEncrypt the application data disk using LUKS.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a common performance impact of storage encryption?

   • AIt always increases disk capacity by compressing data
   • BIt speeds up disk access by reducing the amount of data written
   • CIt has no impact on system performance because encryption is done in hardware
   • DIt can increase CPU usage and reduce disk I/O throughput
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is considering enabling full disk encryption on all employee workstations. The IT team is concerned about the impact on system performance, especially for users who work with large files. Which statement accurately describes the performance trade-off of full disk encryption?

   • AFull disk encryption can cause a noticeable performance decrease, especially on systems without hardware encryption support.
   • BFull disk encryption only affects boot time, not the performance of applications or file access.
   • CFull disk encryption has no impact on system performance because it only encrypts data when the system is idle.
   • DFull disk encryption always improves performance because it compresses data.
   Reveal Solution Discussion Select an answer first