QuestionQ8

Security Operations

A company that provides services to clients who work with highly sensitive data would like to provide assurance that the data's confidentiality is maintained in a dynamic, low-risk environment. Which of the following would best achieve this goal?

Choose two
Explanation

Encrypting data at rest, in transit, and in use directly protects confidentiality across every state the data can be in, and configuring SOAR to monitor and intercept files leaving the network stops unauthorized disclosure through exfiltration in a constantly changing environment. File integrity monitoring detects tampering and unauthorized modification, which speaks to integrity rather than confidentiality, so it does not satisfy the stated goal as well as the exfiltration-monitoring control does.

Community Discussion

No comments yet. Be the first to start the discussion!