PCI SSCPCI DSSEncryptionEASYFree question
What is encryption?
- A.Creating a backup copy of data given that key-encrypting keys may be shorter than the data-encrypting keys they protect
- B.Compressing data for storage, which Requirement 3.2.1 subjects to documented retention limits and a process at least every three months to find and securely delete anything exceeding them
- C.The process of converting plaintext data into an unreadable format (ciphertext) using a cryptographic algorithm and key
- D.Deleting data permanently, given that the standard permits encryption keys to be stored alongside the data they protect
Why C is correct
Encryption converts readable plaintext into unreadable ciphertext using cryptographic algorithms and keys, protecting data confidentiality.
Know someone studying for PCI DSS? Send them this one.