Part VII — Protecting Data

Chapter 17

Data Security Principles and Encryption

Domain 7 Lab 9

📖 Key Topics Covered

  • Data Security Principles and
  • Data Security Principles
  • Data States
  • PROTECTION METHODS
  • Data at
  • Data in
  • Full‐disk encryption (BitLocker, LUKS), file‐level
  • TLS/SSL, VPN, SSH, HTTPS, encrypted email (S/
  • MIME, PGP)
  • Encryption Fundamentals
  • Symmetric Encryption
  • KEY LENGTH
  • USE CASE
  • Current standard; secure
  • VPN, TLS

🔑 Key Terms

Broken Deprecated Digital Certificate Disallowed ECC (Elliptic Curve) GPG (asymmetric) GPG (symmetric) PKI (Public Key Infrastructure)

See the full definitions in the Glossary and test yourself with Flashcards.

Assessment Tips

💡 Assessment Tip

Know the difference between encryption (reversible with a key) and hashing (one‐way, not reversible). AES is the current symmetric standard. RSA and ECC are asymmetric. SHA‐256 is the current hashing standard. MD5 and SHA‐1 are deprecated for securit

🧪 Hands-On Lab

This chapter includes Lab 9 in Appendix E. View lab setup guide →