Which method helps protect data stored on a hard drive, USB flash drive, or other media while the data is simply sitting on the device and not being used?
Encrypting the storage device (full-disk or file-level encryption)
Encrypting data at rest converts the stored information into unreadable ciphertext that can only be unlocked with the correct decryption key. If an attacker gains physical access to the drive, the data remains unintelligible. In contrast, re-formatting mainly removes file-system pointers and often leaves data recoverable, password-protecting a device relies on access control rather than cryptography, and a firewall only inspects network traffic, not contents on local storage.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
How does encryption protect data at rest?
Open an interactive chat with Bash
What is the difference between full-disk encryption and file-level encryption?