CompTIA Cloud+ Practice Test

What type of encryption can mitigate a security breach if backup tapes fall out of a shipping vehicle?

1. Transmission level encryption

2. Transport layer encryption

3. Hard drive encryption

4. File level encryption

The correct answer is: Hard drive encryption

Hard drive encryption is designed to protect data stored on a physical drive by encrypting the entire volume. This means that if backup tapes—essentially physical drives—are lost or stolen, the data on them remains encrypted and cannot be accessed without the appropriate decryption key. This level of encryption acts as a robust safeguard against unauthorized access to sensitive information, even in the event of physical theft or loss. In contrast, transmission level and transport layer encryption primarily focus on securing data while it is being transmitted over networks, meaning they wouldn't protect data once it reaches a physical medium like backup tapes. File level encryption secures individual files but, if not applied to the entire drive, might leave some data unprotected, especially if entire volume or disk access is granted without authentication. Therefore, hard drive encryption is the most effective type for mitigating risks associated with physical loss of storage media.