easyMultiple Choice
SSCP Practice Question: Encrypt large volumes of data at rest on a file…
A company needs to encrypt large volumes of data at rest on a file server. Which type of cryptography is most appropriate for this task?
⚠ Common exam trap
Watch out — candidates often confuse the role of asymmetric encryption (used for key exchange or small data) with bulk encryption, or mistakenly think PKI is an encryption method rather than a management framework, leading them to choose options that are technically valid in other contexts but inappropriate for large-scale data-at-rest encryption.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Symmetric encryption
Symmetric encryption uses a single shared key for both encryption and decryption, making it significantly faster and more efficient than asymmetric encryption for bulk data encryption. For large volumes of data at rest on a file server, symmetric algorithms like AES-256 provide the necessary performance and security, as they are designed to handle high-throughput encryption with minimal computational overhead.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Asymmetric encryption
Why it's wrong here
Asymmetric encryption's slow key operations make it impractical for bulk file-server data, where symmetric ciphers handle high throughput. It is tempting because asymmetric cryptography solves key distribution and digital signatures, and would be the right choice for exchanging keys or verifying identity—not for encrypting large volumes at rest.
- ✗
Public Key Infrastructure (PKI)
Why it's wrong here
PKI is a framework, not an encryption method.
- ✓
Symmetric encryption
Why this is correct
Symmetric encryption uses a single shared key with algorithms such as AES, delivering the high throughput needed to encrypt large volumes of data at rest on a file server. Asymmetric cryptography is far slower and unsuited to bulk data.
- ✗
Hash function
Why it's wrong here
A hash function is one-way and produces a fixed-length digest, so it cannot be reversed to recover the original file contents; it is used for integrity verification and password storage, not for encrypting data at rest.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 971 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.