Encryption · Question 12 of 12
A company encrypts its database with AES-256 but stores the key in a configuration file on the same server. An attacker gains root access. How well is the data protected?
1 answer is correct. Hard
Show answer
Answer
- C Hardly, because the attacker finds the key next to the data
Explanation
The strength of the algorithm is useless if the key lies unprotected next to the data. Whoever takes over the server reads both. Keys belong in separate key management or a hardware security module with its own access control.