27. A security administrator must use a strategy to protect the company's data. The security administrator decides to deploy FDE on the end user devices and TLS for all web connections. Which of the following concepts are being used?
Answer: B,E
Data in transit and Data at rest are being used.
The security administrator is implementing Full Disk Encryption (FDE) to safeguard data at rest on end user devices and Transport Layer Security (TLS) to protect data in transit during web connections.
A) Data segmentation
Data segmentation refers to the practice of dividing data into different segments to improve security and compliance. This option is incorrect as the question does not mention any strategies related to segregating data based on sensitivity or access requirements.
B) Data in transit
This option is correct because the use of TLS ensures that data is encrypted while being transmitted over the internet, thereby protecting it from interception. This aligns with the concept of securing data in transit.
C) Data sovereignty
Data sovereignty is concerned with the legal implications and governance of data based on the geographical location of the data. This option is incorrect as the question does not address any legal jurisdiction or locality of data storage.
D) Data in use
Data in use refers to data that is actively being processed or worked on. This option is incorrect because the strategies mentioned—FDE and TLS—do not specifically address the protection of data while it is actively being utilized.
E) Data at rest
This option is correct as Full Disk Encryption (FDE) is specifically designed to protect data stored on devices, thereby ensuring that data at rest is secure from unauthorized access. This is a key aspect of the security administrator's strategy.
F) Data redundancy
Data redundancy involves duplicating data to ensure its availability and integrity but does not pertain to the encryption strategies discussed in the question. Therefore, this option is incorrect.
Conclusion
The combination of TLS for data in transit and FDE for data at rest effectively encapsulates the right strategies for protecting company data. Other options, such as data segmentation, data sovereignty, data in use, and data redundancy, do not directly relate to the encryption methods being implemented, confirming that B and E are the correct concepts being utilized.