16. A security administrator must use a strategy to protect the company's data. The security administrator decides to deploy FDE on the end user devices and TLS for all web connections. Which of the following concepts are being used? (Select two.)
Answer: B,E
Data in transit and Data at rest concepts are being used.
The security administrator is utilizing the concepts of Data in transit and Data at rest by deploying Full Disk Encryption (FDE) on end user devices, which protects data at rest, and using Transport Layer Security (TLS) for web connections, which secures data in transit.
A) Data segmentation
Data segmentation refers to the practice of dividing data into smaller, manageable parts to improve security and performance. While segmentation can enhance data security, it is not directly related to the measures of FDE or TLS, which focus on encryption and data protection rather than dividing data.
B) Data in transit
Data in transit refers to data that is actively moving from one location to another, such as across the internet or through a private network. The use of TLS for all web connections directly protects this type of data, ensuring it is encrypted during transmission and safeguarding it from interception.
C) Data sovereignty
Data sovereignty involves the legal and regulatory frameworks governing data based on the location where it is stored or processed. This concept does not directly relate to the deployment of FDE or TLS, as those technologies do not inherently address issues of jurisdiction or regulatory compliance.
D) Data in use
Data in use pertains to data that is actively being processed or accessed by applications. The strategies employed by the security administrator do not specifically address the security of data while it is being used, making this option incorrect in the context of the measures discussed.
E) Data at rest
Data at rest refers to inactive data stored physically in any digital form (e.g., databases, data warehouses). The implementation of Full Disk Encryption (FDE) on end user devices protects data at rest by ensuring that the stored information is encrypted and secure from unauthorized access when the device is not in use.
F) Data redundancy
Data redundancy involves duplicating data to ensure reliability and availability in case of data loss. While redundancy is an important aspect of data management, it does not apply to the protective measures of FDE and TLS, which focus on encryption rather than duplication.
Conclusion
The correct concepts of Data in transit and Data at rest are directly supported by the deployment of TLS and FDE, respectively. All other options fail to align with the specific protective measures taken by the security administrator, which focus on securing data both while it is stored and while it is being transmitted.