SEC+ Mod 4 Part 2

Which type of encryption secures all the data stored within a database using a single encryption key?

• Partition-Level Encryption

• Volume-Level Encryption

• Database-Level Encryption

• Full-Disk Encryption

Answer explanation

Database-Level Encryption secures all data stored within a database using a single encryption key.

What is the primary purpose of partition-level encryption?

• To encrypt entire databases

• To encrypt individual files or folders

• To encrypt sections of a storage device

• To encrypt entire volumes or disks

Answer explanation

The primary purpose of partition-level encryption is to encrypt sections of a storage device, not entire databases, files, folders, or volumes.

Which encryption method is often used in storage systems and operating systems to encrypt entire volumes or disks?

• Database-Level Encryption

• Partition-Level Encryption

• Volume-Level Encryption

• Full-Disk Encryption

Answer explanation

Volume-Level Encryption is often used in storage systems and operating systems to encrypt entire volumes or disks.

Which tool is a built-in disk encryption tool for Windows operating systems?

• FileVault

• LUKS

• VeraCrypt

• BitLocker

Answer explanation

BitLocker is a built-in disk encryption tool for Windows operating systems.

Which encryption tool is Apple's native disk encryption tool for macOS?

• BitLocker

• FileVault

• LUKS

• VeraCrypt

Answer explanation

FileVault is Apple's native disk encryption tool for macOS.

Which encryption tool is an open-source disk encryption software that is a successor to TrueCrypt?

• BitLocker

• FileVault

• LUKS

• VeraCrypt

Answer explanation

VeraCrypt is an open-source disk encryption software that is a successor to TrueCrypt, making it the correct choice in this case.

Which encryption specification is often used with Linux distributions and supports full-disk encryption?

• BitLocker

• FileVault

• LUKS

• VeraCrypt

Answer explanation

LUKS is often used with Linux distributions and supports full-disk encryption, making it the correct choice for this question.

What is a Trusted Platform Module (TPM)?

• A standalone hardware device for cryptographic operations.

• A hardware chip embedded in a computer's motherboard for secure cryptographic operations.

• A software application for managing cryptographic keys.

• A network-based security protocol.

Answer explanation

A Trusted Platform Module (TPM) is a hardware chip embedded in a computer's motherboard for secure cryptographic operations, making it the correct choice.

Which of the following is NOT a function of a Trusted Platform Module (TPM)?

• Generating cryptographic keys.

• Protecting sensitive data and keys from unauthorized access.

• Performing cryptographic operations in a protected environment.

• Acting as a standalone hardware device integrated into a network.

Answer explanation

The correct choice is 'Acting as a standalone hardware device integrated into a network' because a TPM is not designed to function as a standalone hardware device in a network environment.

What is the primary purpose of a Hardware Security Module (HSM)?

• To act as a software application for cryptographic operations.

• To serve as a hardware chip embedded in a computer's motherboard.

• To be a standalone hardware device for cryptographic operations that can be integrated into a network or data center.

• To manage network security protocols.

Answer explanation

The primary purpose of a Hardware Security Module (HSM) is to be a standalone hardware device for cryptographic operations that can be integrated into a network or data center.