Examkin

Question

Difficulty: EasyData Protection and Storage Security Architecture

Match each storage security technology to its primary operational function.

  • TokenizationReplaces sensitive data fields with non-sensitive surrogate tokens.
  • Self-Encrypting Drive (SED)Provides automatic, hardware-level block encryption directly on physical storage media.
  • Hardware Security Module (HSM)Safeguards and manages cryptographic keys inside dedicated physical security hardware.
  • Data Loss Prevention (DLP)Monitors and blocks unauthorized transmission or exfiltration of sensitive information.

Answer

Tokenization maps to replacing sensitive data fields with non-sensitive surrogate tokens; Self-Encrypting Drive (SED) maps to providing automatic, hardware-level block encryption directly on physical storage media; Hardware Security Module (HSM) maps to safeguarding and managing cryptographic keys inside dedicated physical security hardware; Data Loss Prevention (DLP) maps to monitoring and blocking unauthorized transmission or exfiltration of sensitive information.
Tokenization obfuscates data using surrogate tokens; SED provides automated physical drive encryption; HSM secures cryptographic keys; DLP inspects data to prevent unauthorized transfers.

Step-by-Step Solution

1
Analyze each security technology listed on the left.
Identified Tokenization, SED, HSM, and DLP as primary storage and data protection mechanisms.
Each technology satisfies a specific, distinct function within enterprise storage architecture.
2
Match each technology to its unique functional capability.
Tokenization replaces data with surrogate tokens; SED encrypts disk blocks directly; HSM protects cryptographic keys; DLP prevents exfiltration.
Matching capabilities directly tests core knowledge of data protection and storage security mechanisms.

Key Concept

Storage and Data Protection Controls
Rate this question

Topics

Data Protection and Storage Security Architecture

More questions from this topic