An organization is deploying a container-based application that requires persistence of sensitive information on the filesystem. The filesystem will be deployed into a cloud environment. The information that will persist will include PHI (Protected Health Information). Which of the following solutions would be best to ensure confidentiality of information at rest?
Correct Answer: B
AES-GCM (Advanced Encryption Standard - Galois/Counter Mode)is a symmetric encryption standard that provides bothconfidentialityandintegrity, making it ideal for encrypting sensitive information like PHI at rest in a cloud environment.
Triple DESis outdated and less secure compared to modern standards like AES.
RSAis an asymmetric encryption standard better suited for encrypting small data (e.g., keys) rather than bulk data like a filesystem.
TLSis a protocol for securing data in transit, not at rest.
RIPEMDis a cryptographic hash function and does not provide encryption, which is required to ensure confidentiality.
Reference:
CompTIA CASP+ Exam Objective 2.1: Implement cryptographic solutions to protect sensitive data.
CASP+ Study Guide, 5th Edition, Chapter 9, Encryption Standards.