Question
A company just learned that the data in its object storage was accessed by an unauthorized party. Which of the following should the company have done to make the data unusable?
- A. The company should have switched from object storage to file storage.
- B. The company should have hashed the data.
- C. The company should have changed the file access permissions.
- D. The company should have encrypted the data at rest. Correct
Explanation
Encrypting data at rest means stolen or exposed objects are unreadable without the encryption keys, so unauthorized access does not expose usable data. Switching to file storage does not protect the content. Hashing is one-way and would make the data unusable for the company too, and changing permissions helps prevent access but does nothing once the data has been accessed.
