A sheriff's office stores cloud backup images that could be stolen with the storage media. What control makes the backup data at rest unreadable to an unauthorized holder of that media?
Select an answer to reveal the explanation.
Short Explanation
Encryption is the locked briefcase. Even if someone walks off with the drive, the contents stay gibberish without the keys. Renaming cleartext files does not give you that protection.
Full Explanation
Encrypting backups at rest protects confidentiality if media, snapshots, or objects are stolen or exposed. Obfuscation by renaming is not a cryptographic control. Broad decrypt rights and weakened integrity checks increase risk rather than compensating for cleartext storage.