Exam SY0-501 topic 1 question 730 discussion

Actual exam question from CompTIA's SY0-501

Question #: 730
Topic #: 1

A security analyst is emailing PII in a spreadsheet file to an audit validator for after-actions related to a security assessment. The analyst must make sure the PII data is protected with the following minimum requirements:
✑ Ensure confidentiality at rest.
✑ Ensure the integrity of the original email message.
Which of the following controls would ensure these data security requirements are carried out?

A. Encrypt and sign the email using S/MIME.
B. Encrypt the email and send it using TLS.
C. Hash the email using SHA-1.
D. Sign the email using MD5.

Show Suggested Answer

Suggested Answer: A 🗳️

by MelvinJohn at June 30, 2020, 12:58 a.m.

Comments

Submit Cancel

MelvinJohn

Highly Voted 5 years ago

S/MIME provides for cryptographic security services such as authentication, message integrity, and non-repudiation of origin (using digital signatures). It also helps enhance privacy and data security (using encryption) for electronic messaging.

upvoted 33 times

mxh778872

3 years, 9 months ago

S/MIME wont "Ensure confidentiality at rest"?

upvoted 2 times

...

ID77

Most Recent 1 year, 3 months ago

Selected Answer: A

S/MIME certificate allows authentication of your emails so that both recipient and sender know who they’re communicating with. Encrypts email at rest and decrypts your email messages so that no unauthorized third party can see your emails. Protects your emails/documents by not allowing any unauthorized third party to tamper with the content of the emails/documents.

upvoted 1 times

...