Study. uk . com
  1. Home
  2. All questions
  3. Question 247

CompTIA Security+ study material · question 247 of 611

A team encrypts every secret in its vault at rest. What problem does this leave unsolved?

  1. The vault's own unlock key has to be protected somewhere
  2. Encryption prevents auditing of secret access
  3. Encrypted secrets cannot be rotated
  4. Secrets can still be read in transit
Show the answer

Answer: A. The vault's own unlock key has to be protected somewhere

Encryption moves the problem to the key, which is what hardware security modules exist to solve.

Source: OWASP Secrets Management Cheat Sheet (OWASP) — OWASP Secrets Management Cheat Sheet › Encryption

Challenge yourself on this topic → Study as cards