What protects data at rest?

Enhance your skills with the CompTIA Data+ Certification Test. Engage with flashcards, tackle challenging multiple choice questions, complete with hints and explanations. Get yourself exam-ready now!

Protecting data at rest means keeping information safe while it’s stored on disks, tapes, or backups. Encryption turns readable data into ciphertext so it can’t be understood without the decryption key. When you combine encryption with secure key management—such as keeping keys in a separate, tightly controlled vault, rotating keys regularly, and enforcing proper access controls—you ensure that even if the storage medium is accessed by an unauthorized person, the data remains unreadable. Hashing verifies data integrity but does not conceal content, so it doesn’t protect data at rest. Storing in plain text is vulnerable, and sharing a public key without access controls doesn’t guard stored data. Hence, encryption with robust key management and access controls is the effective protection for data at rest.