Exam CAS-004 topic 1 question 645 discussion

The best solution to ensure confidentiality of information at rest in this scenario is B. AES-GCM. AES-GCM (Advanced Encryption Standard in Galois/Counter Mode) is a widely used symmetric encryption algorithm that provides strong confidentiality and integrity protections for data at rest. It is both secure and efficient for encrypting sensitive data such as PII and is a standard in modern cryptographic systems. AES-GCM combines the AES encryption algorithm with the Galois/Counter Mode (GCM), which provides built-in authenticated encryption, ensuring that the data not only remains confidential but also that the integrity of the data is guaranteed (i.e., it detects tampering). This makes it ideal for protecting sensitive information stored on a filesystem in a cloud environment. So to ensure confidentiality of information at rest (such as PII) on the filesystem in a cloud environment, AES-GCM (Option B) is the best choice. It provides strong encryption and also ensures data integrity, making it highly suitable for protecting sensitive data at rest.