CompTIA SY0-701 Exam - Topic 1 Question 6 Discussion

Actual exam question for CompTIA's SY0-701 exam

Question #: 6
Topic #: 1

A bank insists all of its vendors must prevent data loss on stolen laptops. Which of the following strategies is the bank requiring?

AEncryption at rest

BMasking

CData classification

DPermission restrictions

Show Suggested Answer

Suggested Answer: A

Encryption at rest is a strategy that protects data stored on a device, such as a laptop, by converting it into an unreadable format that can only be accessed with a decryption key or password. Encryption at rest can prevent data loss on stolen laptops by preventing unauthorized access to the data, even if the device is physically compromised. Encryption at rest can also help comply with data privacy regulations and standards that require data protection. Masking, data classification, and permission restrictions are other strategies that can help protect data, but they may not be sufficient or applicable for data stored on laptops. Masking is a technique that obscures sensitive data elements, such as credit card numbers, with random characters or symbols, but it is usually used for data in transit or in use, not at rest. Data classification is a process that assigns labels to data based on its sensitivity and business impact, but it does not protect the data itself. Permission restrictions are rules that define who can access, modify, or delete data, but they may not prevent unauthorized access if the laptop is stolen and the security controls are bypassed. Reference: CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 17-18, 372-373

by Tamar at Dec 25, 2023, 06:51 AM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Christene

3 months ago

Data classification is important, but not the main focus here.

upvoted 0 times

...

Tamar

3 months ago

Permission restrictions could help too, but not as effective as encryption.

upvoted 0 times

...

Arlette

3 months ago

Wait, are they really enforcing this? Sounds extreme.

upvoted 0 times

...

Lorita

4 months ago

I think masking is more relevant here.

upvoted 0 times

...

Alyce

4 months ago

Definitely encryption at rest! That's a must.

upvoted 0 times

...

Glory

4 months ago

Permission restrictions could help, but I lean towards encryption at rest since it directly protects data on stolen devices.

upvoted 0 times

...

Samira

4 months ago

I feel like data classification might be important too, but it seems more about organizing data rather than preventing loss.

upvoted 0 times

...

Mari

4 months ago

I'm not entirely sure, but I remember a practice question about data loss prevention that mentioned masking. Could that be relevant here?

upvoted 0 times

...

Chauncey

5 months ago

I think the bank is looking for a way to protect sensitive data, so maybe encryption at rest is the right answer?

upvoted 0 times

...

Staci

5 months ago

Permission restrictions could help, but that might not be sufficient on its own to prevent data loss from a stolen laptop. I'll need to think through the pros and cons of each option.

upvoted 0 times

...

Patrick

5 months ago

Data classification could also be a good strategy, as it would allow the bank to identify and protect the most sensitive data. But I'm not sure if that alone would be enough to meet the requirement.

upvoted 0 times

...

Miriam

5 months ago

Hmm, I'm not entirely sure about this one. I'll need to think through the different options carefully to determine which one best matches the bank's requirement.

upvoted 0 times

...

Sunny

5 months ago

This seems like a straightforward question about data protection strategies. I'll focus on the key requirement of preventing data loss on stolen laptops.

upvoted 0 times

...

Beatriz

5 months ago

Encryption at rest seems like the most obvious choice here. If the data on the laptop is encrypted, it should prevent data loss even if the device is stolen.

upvoted 0 times

...

Yasuko

5 months ago

Okay, let me think this through step-by-step. Material requirements planning is all about planning for the materials needed to produce a product, so the key file would have to contain information about the materials and components required. I think the bill of materials is the most likely answer here.

upvoted 0 times

...

Lenna

2 years ago

Oof, permission restrictions? That sounds like a total nightmare. Can you imagine trying to manage all those user access levels? Talk about a headache and a half. I'm with Isadora on this one - encryption is the way to go, nice and simple.

upvoted 0 times

Lemuel

2 years ago

Masking could also be helpful in certain situations, but encryption is more comprehensive.

upvoted 0 times

...

Tijuana

2 years ago

It's important to prioritize data security, so encryption makes sense.

upvoted 0 times

...

Micah

2 years ago

Yeah, encryption is a lot simpler than dealing with all those access levels.

upvoted 0 times

...

Freeman

2 years ago

Encryption at rest is definitely a more straightforward solution.

upvoted 0 times

...

Anna

2 years ago

I agree, permission restrictions sound like a nightmare to manage.

upvoted 0 times

...

Kirk

2 years ago

Hold up, I don't think it's that simple. Data classification could be key here - if they know what info is most critical, they can prioritize the protection. Kinda like triage for your data, you know?

upvoted 0 times

...

Lillian

2 years ago

Hmm, I don't know, encryption can be a real pain to implement sometimes. Maybe they're looking for something a little more user-friendly, like data masking? That way the sensitive info is hidden, but the users can still access what they need.

upvoted 0 times

...

Isadora

2 years ago

Whoa, talk about a loaded question! This bank is really cracking down on data security. I bet they've had some nasty breaches in the past. Encryption at rest seems like the obvious choice here - gotta keep those files locked down tight, ya know?

upvoted 0 times

...