Exam CV0-003 topic 1 question 276 discussion

Actual exam question from CompTIA's CV0-003

Question #: 276
Topic #: 1

A systems administrator is informed that a database server containing PHI and PII is unencrypted. The environment does not support VM encryption, nor does it have a key management system. The server needs to be able to be rebooted for patching without manual intervention. Which of the following will BEST resolve this issue?

A. Ensure all database queries are encrypted.
B. Create an IPSec tunnel between the database server and its clients.
C. Enable protocol encryption between the storage and the hypervisor.
D. Enable volume encryption on the storage.
E. Enable OS encryption.

Show Suggested Answer

Suggested Answer: D 🗳️

by FrancisDrake at Jan. 20, 2024, 4:34 p.m.

Comments

Submit Cancel

Pisces225

10 months ago

Selected Answer: D

Encrypts our data at rest which doesn't touch the VMs, the VM's OSs, but you'd include IPSec for in transit encryption as well. Fairly obvious they want D here though.

upvoted 4 times

...

FasterN8

11 months, 1 week ago

Selected Answer: D

Both D and E provide the encryption needed to protect the data, but OS encryption will generally require a pin before it will complete booting = manual intervention.

upvoted 1 times

...

FrancisDrake

1 year ago

The solutions don't match the scenario. Maybe someone can enlighten me.

upvoted 2 times

FrancisDrake

1 year ago

Or rather the third sentence in the scenario doesn't seem to match the rest of the scenario.

upvoted 2 times

...