Encryption at rest primarily protects data:
- Only on Sundays
- While the user is on a phone call about it
- While it is being typed at the keyboard
- While it is stored on disk or in a backup, typically using AES or similar block ciphers
Show answer and solution
Correct answer: D. While it is stored on disk or in a backup, typically using AES or similar block ciphers
At rest = on disk, protected by block ciphers (often AES-256), with keys managed in a KMS.
The other options describe unrelated user behaviour or fiction.