mediumMultiple SelectObjective-mapped
CISSP Practice Question: Which THREE of the following are examples of data…
Which THREE of the following are examples of data at rest?
⚠ Common exam trap
Many candidates confuse data in a database as data in use or data in motion, but a database stores data persistently on disk, making it data at rest unless it is being actively queried or transferred.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data stored on a hard drive
Data at rest refers to data that is physically stored on a persistent medium and is not currently moving across a network or being processed. Data stored on a hard drive is a classic example because the data resides on a non-volatile storage device, whether it is an internal HDD, SSD, or external drive. The data remains on the medium until it is read, modified, or deleted, and it is typically protected by encryption mechanisms such as BitLocker or FileVault.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data stored on a hard drive
Why this is correct
A hard drive (HDD) or solid-state drive (SSD) stores data persistently when not actively being read from or written to. This includes files, operating system components, and applications residing on the disk, awaiting access. Such data is considered "at rest" because it is static and not actively traversing a network or being processed by a CPU, making it a prime target for encryption.
- ✗
Data in an email in transit
Why it's wrong here
Email in transit refers to data actively moving across network infrastructure, such as Simple Mail Transfer Protocol (SMTP) servers and various network links, from sender to recipient. During this transmission phase, the data is actively flowing through communication channels and is not stored statically. This continuous movement classifies it as data in motion, requiring transport layer security (TLS) for protection.
- ✓
Data in a database
Why this is correct
Data residing within a database management system (DBMS) is typically stored persistently on underlying storage devices like hard drives or Storage Area Networks (SANs). Even when the database server is running, the vast majority of the data within its tables and indexes is static, awaiting queries or updates. This persistent, non-transient state classifies it as data at rest, necessitating robust encryption and access controls.
- ✓
Data on a backup tape
Why this is correct
Backup tapes represent an offline, archival storage medium where data is written sequentially and then typically removed from active systems. Once written and stored, the data on these tapes is static and inactive, not undergoing processing or transmission. This characteristic makes data on backup tapes a classic example of data at rest, often in an air-gapped environment for enhanced security.
- ✗
Data on a network cable
Why it's wrong here
Data traversing a network cable, whether copper or fiber optic, is actively being transmitted from one network device to another. This continuous flow of packets and frames across the physical medium signifies data in motion, as it is actively moving through the communication pathway rather than being stored in a static state. It requires network-level encryption like IPsec or TLS for protection.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISSP question from scratch — 747 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.