Chapter 1
Server Hardware Installation and Management
Course: Comptia Server Sk0 005
Subject: Comptiaserver Sk0 005
Chapter: Security And Disaster Recovery
1. Encryption Paradigms
Encryption is a foundational security control that ensures confidentiality, integrity, and non-repudiation of data. It transforms readable data (plaintext) into unreadable ciphertext using cryptographic algorithms and keys. The two main paradigms of encryption are based on the state of the data:
a. Data at Rest
Definition: Data that is stored on persistent media—whether on-premises or in the cloud—is considered "at rest." This includes everything from database files to archived backups, USB drives, and storage arrays.
Purpose:
- Prevent unauthorized access in case of physical theft or compromise.
- Reduce data breach impact if storage is accessed outside of intended control.
Encryption Techniques:
- Full Disk Encryption (FDE): Encrypts the entire storage device. Transparent to the OS once unlocked.
Examples: BitLocker (Windows), FileVault (macOS), LUKS/dm-crypt (Linux)
- Examples: BitLocker (Windows), FileVault (macOS), LUKS/dm-crypt (Linux)
- File/Folder-Level Encryption: Encrypts specific files or folders rather than the entire disk.