CompTIA CySA+ (CS0-002) — Question 120

Which of the following should a database administrator implement to BEST protect data from an untrusted server administrator?

Answer options

• A. Data deidentification
• B. Data encryption
• C. Data masking
• D. Data minimization

Correct answer: B

Explanation

Data encryption is the most effective method for protecting data because it transforms the information into an unreadable format, making it inaccessible to unauthorized users. While data deidentification, masking, and minimization can help reduce exposure, they do not offer the same level of security as encryption when it comes to preventing unauthorized access.