013_Encrypting Data - CompTIA Security+ SY0-701 - 1.4

Front

What is the primary purpose of data at rest encryption?

Back

To encrypt data stored on devices such as SSDs and hard drives.

Front

Which of the following is a method of file-level encryption in Windows? BitLocker, FileVault, EFS (Encrypting File System), IPsec

Back

EFS (Encrypting File System)

Front

Explain how column-level encryption can improve database performance compared to full database encryption.

Back

It encrypts only sensitive columns, allowing non-sensitive data to remain in plain text for faster searches.

Front

What is the role of a VPN in data in transit encryption?

Back

To create an encrypted tunnel for secure communication between sites or remote users.

Front

Discuss the trade-offs involved in choosing an encryption algorithm.

Back

Security level, speed, and complexity of implementation.

Front

Why is the secrecy of the encryption key more important than the secrecy of the algorithm?

Back

Because knowing the algorithm does not grant access without the correct key.

Front

How does key strengthening increase resistance to brute force attacks?

Back

By performing the encryption or hashing process multiple times.

Front

Evaluate the effectiveness of using longer keys in encryption.

Back

Longer keys provide more resistance to brute force attacks.

Front

What is the main advantage of using AES over DES? Options: AES is slower but more secure., AES uses a smaller key size., AES supports multiple versions for varied security levels., AES is a symmetric key algorithm.

Back

AES supports multiple versions for varied security levels.

Front

Describe a scenario where file-level encryption would be more appropriate than full disk encryption.

Back

When only specific files or folders need to be encrypted for security.