thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Data at Rest

Data stored on persistent media such as disks, databases, backups, or cloud object storage.

Definition

Data at rest is protected with full-disk, volume, file, or database encryption, along with access controls and physical security. Key management is critical because the encryption keys must be protected separately from the data. Cloud providers offer server-side encryption with provider- or customer-managed keys.

Example

An Amazon S3 bucket configured with SSE-KMS encrypts stored objects at rest.

Exam tip

Match the data state to the control: rest-storage encryption, transit-TLS/IPsec, use-secure enclaves.

Related terms