CompTIA CASP+ Practice Test

Which of the following controls is crucial for ensuring that sensitive data isn't disclosed through a web service?

1. Firewalls.

2. Encryption and decryption.

3. Regular backup procedures.

4. Network segmentation.

The correct answer is: Encryption and decryption.

The focus on encryption and decryption as a crucial control for preventing the disclosure of sensitive data through a web service is well-founded. Encryption transforms sensitive data into an unreadable format, ensuring that even if unauthorized users gain access to the data over the web service, they cannot interpret it without the corresponding decryption key. This process protects data in transit and at rest, addressing potential exposure during transmission or in secure databases. In contrast, while firewalls can provide perimeter security and help control incoming and outgoing traffic, they do not specifically encrypt data. Regular backup procedures focus on data recovery and redundancy rather than securing the data itself during transmission or storage. Network segmentation can enhance security by isolating different parts of a network, but it does not directly protect sensitive data from being intercepted or disclosed during a web transaction. Thus, encryption and decryption stand out as the most effective means of protecting sensitive data within web services, establishing a critical barrier against unauthorized access and ensuring confidentiality.