CompTIA CASP+ (CAS-003) — Question 48

An organization's network engineering team recently deployed a new software encryption solution to ensure the confidentiality of data at rest, which was found to add 300ms of latency to data read-write requests in storage, impacting business operations.
Which of the following alternative approaches would BEST address performance requirements while meeting the intended security objective?

Answer options

• A. Employ hardware FDE or SED solutions.
• B. Utilize a more efficient cryptographic hash function.
• C. Replace HDDs with SSD arrays.
• D. Use a FIFO pipe a multithreaded software solution.

Correct answer: A

Explanation

The correct answer is A because hardware Full Disk Encryption (FDE) or Self-Encrypting Drives (SED) typically provide better performance than software-based solutions while maintaining data security. Options B and D don't directly address the performance impact of data storage, and option C, while it may improve performance, does not specifically meet the encryption requirement.