Which of the following controls would BEST prevent an attacker from accessing sensitive data from...

Encryption of data at restis the best control to protectsensitive data from unauthorized access, even if physical or network access to the disk or file is obtained.

Protection:Data remains unreadable without the proper encryption keys.

Scenarios:Protects data from theft due to lost devices or compromised servers.

Compliance:Often mandated by regulations (e.g., GDPR, HIPAA).

Incorrect Options:

A. Next-generation antivirus:Detects malware, not data protection.

B. Data loss prevention (DLP):Prevents data exfiltration but does not protect data at rest.

C. Endpoint detection and response (EDR):Monitors suspicious activity but does not secure stored data.

Exact Extract from CCOA Official Review Manual, 1st Edition:

Refer to Chapter 6, Section "Data Security Strategies," Subsection "Encryption Techniques" - Encryption of data at rest is essential for protecting sensitive information.