Which practice is specifically associated with protecting data at rest in Tanium deployments?

Which practice is specifically associated with protecting data at rest in Tanium deployments?

• A. Encryption at rest
• B. TLS for transport
• C. Multi-factor authentication only
• D. Public exposure of data

Answer: (D)

Protecting data at rest means keeping stored data unreadable even if someone gains access to the storage. In Tanium deployments, this is achieved by encrypting the data at rest—encrypting the Tanium data store and using disk- or database-level encryption with proper key management. Data in transit between components is protected by TLS, which serves a different purpose (data in motion). Multi-factor authentication strengthens who can access systems but doesn’t itself encrypt stored data. Exposing data publicly increases risk and undermines protection. So the practice tied to data at rest is encryption at rest.

Protecting data at rest means keeping stored data unreadable even if someone gains access to the storage. In Tanium deployments, this is achieved by encrypting the data at rest—encrypting the Tanium data store and using disk- or database-level encryption with proper key management. Data in transit between components is protected by TLS, which serves a different purpose (data in motion). Multi-factor authentication strengthens who can access systems but doesn’t itself encrypt stored data. Exposing data publicly increases risk and undermines protection. So the practice tied to data at rest is encryption at rest.