Which of the following will BEST resolve this issue?

A systems administrator is informed that a database server containing PHI and PII is unencrypted. The environment does not support VM encryption, nor does it have a key management system. The server needs to be able to be rebooted for patching without manual intervention.

Which of the following will BEST resolve this issue?
A . Ensure all database queries are encrypted
B . Create an IPSec tunnel between the database server and its clients
C . Enable protocol encryption between the storage and the hypervisor
D . Enable volume encryption on the storage
E . Enable OS encryption

View Answer

Answer: D

Explanation:

Volume encryption is a type of encryption that protects data at the storage level by encrypting an entire disk or partition. Volume encryption can provide strong security for data at rest, as it prevents unauthorized access to the data even if the storage device is lost, stolen, or compromised. Volume encryption can also support automatic booting without manual intervention, as it can use a pre-boot authentication mechanism that does not require user input. Enabling volume encryption on the storage is the best way to resolve the issue of having an unencrypted database server containing PHI and PII, as it can protect the sensitive data without relying on VM encryption or a key management system.

Reference: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7