What must a server administrator do to ensure that data on the SAN is not compromised if leaked?

What must a server administrator do to ensure that data on the SAN is not compromised if leaked?

• A. Backup to a secure location
• B. Encrypt the data at rest
• C. Limit physical access
• D. Monitor access logs

Answer: (B)

To ensure that data on a Storage Area Network (SAN) is not compromised if leaked, encrypting the data at rest is a critical measure. Data at rest refers to data that is stored on a physical medium (like disks or tapes) and is crucial to protect it from unauthorized access. When data is encrypted, even if someone gains access to the storage medium, they will not be able to read or use the data without the appropriate decryption key. This adds a strong layer of security, ensuring that sensitive information remains confidential. While other options may contribute to the overall security strategy, they do not provide the same level of protection specifically related to the risk of data being leaked or accessed without authorization. Backing up data, limiting physical access, and monitoring access logs are important practices but do not inherently protect the confidentiality of the data itself if it is accessed unlawfully. Through encryption, you safeguard the data itself, meaning that even if it is leaked, it remains unreadable to unauthorized users. This makes it a fundamental tool for managing sensitive data in a SAN environment.

To ensure that data on a Storage Area Network (SAN) is not compromised if leaked, encrypting the data at rest is a critical measure. Data at rest refers to data that is stored on a physical medium (like disks or tapes) and is crucial to protect it from unauthorized access. When data is encrypted, even if someone gains access to the storage medium, they will not be able to read or use the data without the appropriate decryption key. This adds a strong layer of security, ensuring that sensitive information remains confidential.

While other options may contribute to the overall security strategy, they do not provide the same level of protection specifically related to the risk of data being leaked or accessed without authorization. Backing up data, limiting physical access, and monitoring access logs are important practices but do not inherently protect the confidentiality of the data itself if it is accessed unlawfully. Through encryption, you safeguard the data itself, meaning that even if it is leaked, it remains unreadable to unauthorized users. This makes it a fundamental tool for managing sensitive data in a SAN environment.