013_Encrypting Data - CompTIA Security+ SY0-701 - 1.4

What is the primary purpose of data at rest encryption?

• To encrypt data while it is being transmitted over a network.

• To encrypt data stored on devices such as SSDs and hard drives.

• To encrypt data in a database.

• To encrypt data using public algorithms.

Which of the following is a method of file-level encryption in Windows?

• BitLocker

• FileVault

• EFS (Encrypting File System)

• IPsec

Explain how column-level encryption can improve database performance compared to full database encryption.

• It encrypts all data, reducing the need for decryption.

• It encrypts only sensitive columns, allowing non-sensitive data to remain in plain text for faster searches.

• It uses asymmetric keys for faster encryption.

• It compresses data before encryption to save space.

What is the role of a VPN in data in transit encryption?

• To encrypt data stored on a hard drive.

• To create an encrypted tunnel for secure communication between sites or remote users.

• To encrypt individual files on a computer.

• To provide a public key for encryption.

Discuss the trade-offs involved in choosing an encryption algorithm.

• Security level, speed, and complexity of implementation.

• Cost, availability, and user-friendliness.

• Color, size, and shape.

• Brand, warranty, and customer service.

Why is the secrecy of the encryption key more important than the secrecy of the algorithm?

• Because algorithms are always secret and never shared.

• Because knowing the algorithm does not grant access without the correct key.

• Because keys are easier to remember than algorithms.

• Because algorithms are less secure than keys.

How does key strengthening increase resistance to brute force attacks?

• By using shorter keys.

• By performing the encryption or hashing process multiple times.

• By using weaker algorithms.

• By storing keys in plain text.

Evaluate the effectiveness of using longer keys in encryption.

• Longer keys are less secure and easier to break.

• Longer keys provide more resistance to brute force attacks.

• Longer keys are faster to process.

• Longer keys are only useful for symmetric encryption.

What is the main advantage of using AES over DES?

• AES is slower but more secure.

• AES uses a smaller key size.

• AES supports multiple versions for varied security levels.

• AES is a symmetric key algorithm.

Describe a scenario where file-level encryption would be more appropriate than full disk encryption.

• When encrypting an entire hard drive is necessary.

• When only specific files or folders need to be encrypted for security.

• When encrypting data in transit.

• When using a VPN for secure communication.