CISSP: Certified Information Systems Security Professional

Question

A firm in the defense industry has been instructed to meet contractual encryption requirements for a government client’s Controlled Unclassified Information (CUI). Which encryption approach best protects data at rest in the MOST efficient and cost-effective way?

Explanation

CUI while in storage requires cryptographic protection against unauthorized disclosure. Encryption at the virtualization layer can centrally protect the logically separated program storage regardless of the underlying disk systems, reducing dependence on and management of encryption capabilities in each back-end array. This protects the relevant CUI without the unnecessary cost and scope of encrypting the entire SAN or physically segregating storage.

Learn more

NIST SP 800-171 Rev. 3: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ128

Community Discussion