Study. uk . com
  1. Home
  2. All questions
  3. Question 543

CompTIA Security+ study material · question 543 of 611

An organisation wants to rotate its encryption key without re-encrypting terabytes of stored data. Which technique achieves this?

  1. Key wrapping with a key-encryption key
  2. Key escrow
  3. Certificate pinning
  4. Key stretching
Show the answer

Answer: A. Key wrapping with a key-encryption key

The data key stays the same while the outer key that protects it is replaced, so only the wrapped copy changes.

Source: OWASP Key Management Cheat Sheet (OWASP) — OWASP Key Management Cheat Sheet › Key Storage

Challenge yourself on this topic → Study as cards