ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
During a security review, you are asked which control directly enforces confidentiality for sensitive customer data stored in a relational database. Which of the following measures best satisfies this specific requirement?
Sign the database files with the organization's private key.
Apply a SHA-256 hash to each record before storage.
Replicate the database to a secondary region for disaster recovery.
Encrypt the data at rest using a strong algorithm and properly managed keys.
Confidentiality focuses on preventing unauthorized disclosure of information. Encrypting data at rest converts the plaintext records into ciphertext that can only be read with the proper decryption key, directly addressing that goal. Hashing each record creates fixed digests that verify integrity but do not allow the original data to be recovered, so it is unsuitable when the data must later be read. Replicating the database enhances availability, not confidentiality. Digitally signing the files verifies origin and integrity but does not hide the contents from unauthorized viewers.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does encrypting data at rest mean and how does it enforce confidentiality?
Open an interactive chat with Bash
How does SHA-256 hashing differ from encryption in terms of confidentiality?
Open an interactive chat with Bash
Why are database replication and digital file signing unsuitable for ensuring confidentiality?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Concepts
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .