Question 35

AES-256 most securely protects data at rest.

AES-256 is a symmetric encryption algorithm that provides a high level of security for data at rest, making it the most effective choice among the options presented.

A) TLS 1.2

TLS 1.2 is a protocol used for securing data in transit rather than data at rest. While it is essential for protecting data during transmission between systems, it does not provide the same level of protection for data that is stored.

B) AES-256

AES-256 is a robust encryption standard that is widely used for protecting data at rest. With a key size of 256 bits, it offers a very high level of security, making it highly resistant to brute-force attacks and ensuring that stored data remains confidential and secure.

C) Masking

Masking is a technique used to obfuscate data, making it unreadable to unauthorized users. However, it does not encrypt the data, meaning that if the masked data is accessed by someone with the ability to unmask it, the original information can be revealed, providing less security compared to encryption methods.

D) Salting

Salting is a method used to enhance the security of passwords by adding random data to them before hashing. While it is effective for protecting stored passwords, it does not encrypt data at rest and is not a comprehensive solution for protecting sensitive data.

Conclusion

AES-256 stands out as the best option for securely protecting data at rest, given its strong encryption capabilities. In contrast, TLS 1.2, masking, and salting serve different purposes and do not offer the same level of data protection applicable to data that is stored. Thus, AES-256 is the definitive choice for ensuring the security of data at rest.