Examkin

Question

Difficulty: MediumData Protection and Storage Security Architecture

Match each storage security technology to its primary operational application within an enterprise architecture.

  • Self-Encrypting Drive (SED)Performs automatic hardware-level encryption directly on the controller of physical disk media without host CPU overhead.
  • Data Loss Prevention (DLP)Monitors and inspects data in motion, at rest, or in use to prevent unauthorized transmission or exfiltration of sensitive information.
  • Hardware Security Module (HSM)Provides hardware-based cryptographic key generation, management, and secure storage for enterprise data encryption.
  • TokenizationReplaces sensitive data fields with non-sensitive placeholder values linked through a secure vault database.

Answer

The correct pairings match Self-Encrypting Drive (SED) to hardware-level disk encryption; Data Loss Prevention (DLP) to data monitoring and exfiltration prevention; Hardware Security Module (HSM) to key generation and secure key storage; and Tokenization to replacing sensitive data fields with non-sensitive placeholder values.
Each technology is correctly paired with its core operational capability. Self-Encrypting Drives deliver controller-based disk encryption, Data Loss Prevention mitigates unauthorized data exfiltration, Hardware Security Modules protect cryptographic keys and perform high-assurance crypto operations, and Tokenization substitutes sensitive data fields with non-sensitive tokens using a secure vault.

Step-by-Step Solution

1
Evaluate Self-Encrypting Drive (SED)
Identified as disk controller hardware-level bulk encryption.
SED operates transparently on disk controller hardware without requiring host CPU cycles.
2
Evaluate Data Loss Prevention (DLP)
Identified as a content monitoring and exfiltration enforcement system.
DLP inspects structured and unstructured data to detect and prevent unauthorized policy violations.
3
Evaluate Hardware Security Module (HSM)
Identified as a dedicated tamper-resistant cryptographic appliance.
HSMs store master keys and perform cryptoprocessing inside a secure physical boundary.
4
Evaluate Tokenization
Identified as a data substitution method using non-sensitive placeholders.
Tokenization maps sensitive database values to surrogate tokens via a database vault rather than mathematical encryption algorithms.

Key Concept

Data Protection and Storage Security Architecture Controls
Rate this question

Topics

Data Protection and Storage Security Architecture

More questions from this topic