022.4 Data Storage Encryption (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 4)

Questions 16–19

1. 16foundation · easy

   What is the primary purpose of encrypting data at rest on a storage device?

   • ATo protect data from unauthorized access when the device is not in use or is physically removed
   • BTo ensure data is transmitted securely over a network
   • CTo speed up read and write operations on the storage device
   • DTo prevent malware from executing on the system
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is deploying full disk encryption on a fleet of laptops. The laptops are used for video editing, which involves large file transfers and real-time rendering. The IT team is concerned about performance. They have two options: enable BitLocker with hardware encryption on the self-encrypting drives (SEDs) or use software-based BitLocker with AES-NI. Which approach is likely to have the least impact on performance?

   • AUse file-level encryption instead of full disk encryption.
   • BDisable encryption on the video editing laptops.
   • CUse software-based BitLocker with AES-NI.
   • DUse hardware encryption on the SEDs.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A hospital stores patient records on a server. A recent audit found that the data is stored in plaintext on the hard drives. The compliance team requires that data be protected if the physical drives are stolen. Which measure directly addresses this requirement?

   • AImplement strong password policies for user accounts.
   • BUse file permissions to restrict access to the data.
   • CConfigure a firewall to block external access.
   • DEnable encryption at rest on the storage volumes.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of file-level encryption?

   • ATo encrypt the swap partition to prevent data leakage
   • BTo encrypt individual files or directories, allowing selective protection of sensitive data
   • CTo encrypt the entire storage device, including the operating system
   • DTo encrypt network traffic between a client and server
   Reveal Solution Discussion Select an answer first