Encryption of data at restis the best control to protectsensitive data from unauthorized access, even if physical or network access to the disk or file is obtained.
* Protection:Data remains unreadable without the proper encryption keys.
* Scenarios:Protects data from theft due to lost devices or compromised servers.
* Compliance:Often mandated by regulations (e.g., GDPR, HIPAA).
Incorrect Options:
* A. Next-generation antivirus:Detects malware, not data protection.
* B. Data loss prevention (DLP):Prevents data exfiltration but does not protect data at rest.
* C. Endpoint detection and response (EDR):Monitors suspicious activity but does not secure stored data.
Exact Extract from CCOA Official Review Manual, 1st Edition:
Refer to Chapter 6, Section "Data Security Strategies," Subsection "Encryption Techniques" - Encryption of data at rest is essential for protecting sensitive information.