Exam CAS-004 topic 1 question 133 discussion

Bit split

This is a tough one. But per CompTia CASP + CAS-004 Certification guide by Mark Birch, on page 533 states: Bit splitting: Bit splitting is intended to protect data stored with cloud providers... encrypted block is split and distributed across multiple data stores. Data dispersion: Intended to operate much like RAID solutions that utilize parity. Data blocks are dispersed across multiple storage systems or CSP... Data dispersion has more to do with availability rather than encryption

Agree with B. CSP can use homomorphic encryption to perform computation across multiple data storage without exposing sensitive data. Both C (dispersion) and D (splitting) does not involve encryption. A is impractical to use across multiple storage due to key distribution problem. Although the question wording can be improved.

Bit splitting is a security technique that involves dividing data into smaller pieces and distributing these pieces across multiple storage locations or servers. Each piece by itself is incomplete and meaningless without the other pieces.

D. as Nist.800111 supporting A. is from 2007

C. Data dispersion Data dispersion is a technology that allows Cloud Service Providers (CSPs) to add encryption across multiple data storages. This approach involves splitting and dispersing the data across multiple locations, making it more challenging for an attacker to access sensitive information without the proper decryption keys.

The technology that allows Cloud Service Providers (CSPs) to add encryption across multiple data storages is C. Data dispersion1. This method involves spreading out data across multiple storage locations, which can enhance security and resilience.

Bit Splitting = segmenting data across multiple locations for both security and resiliency of the data. Error correction can get a couple of those bits back if anything fails. Source: Verifying each answer against Chat GPT, my experience, other test banks, a written book, and weighing in the discussion from all users to create a 100% accurate guide for myself before I take the exam. (It isn't easy because of the time needed, but it is doing my diligence)

2. What name is given to the practice of splitting encrypted data outputs into multiple parts which are subsequently stored in disparate storage locations? Bit Splitting or Cryptographic Splitting

D. Bit splitting: “ Cryptographic splitting, also known as cryptographic bit splitting or cryptographic data splitting, is a technique for securing data over a computer network. The technique involves encrypting data, splitting the encrypted data into smaller data units, distributing those smaller units to different storage locations, and then further encrypting the data at its new location.”

Homomorphic encryption is a technology that allows CSPs (cloud service providers) to add encryption across multiple data storages. Homomorphic encryption is a form of encryption that allows mathematical operations to be performed on encrypted data without decrypting it. This means that data can be encrypted and stored in multiple locations, and then processed and analyzed while still in its encrypted state. This can be useful for CSPs, as it allows them to securely store and process sensitive data across multiple data storages without having to decrypt it first.

D is the crrect answer

Data dispersion describes intentionally spreading data across different storage locations and/or cloud storage providers in order to ensure the preservation of data if one of the locations becomes unavailable or is destroyed. A specific type of data dispersion is known as bit splitting, or cryptographic splitting, describes the practice of splitting encrypted data outputs into multiple parts which are subsequently stored in disparate storage locations (such as different cloud storage services) and then encrypting the outputs a second time. Answer is D

Bit splitting is the technology that allows CSPs to add encryption across multiple data storages. Bit splitting is a technology that divides a data set into multiple parts that can be stored in different locations, with each part containing a small portion of the original data set. This provides an added layer of security as the data is spread across multiple locations and cannot be accessed without all of the parts. Correct answer is D

Bit splitting is like adding encryption to RAID. The data is first encrypted, then separated into pieces, and the pieces are distributed across several storages

Cryptographic splitting, also known as cryptographic bit splitting or cryptographic data splitting, is a technique for securing data over a computer network. The technique involves encrypting data, splitting the encrypted data into smaller data units, distributing those smaller units to different storage locations, and then further encrypting the data at its new location. https://en.wikipedia.org/wiki/Cryptographic_splitting

If my understanding is correct bit splitting does not add encryption it only splits the encryption, the encryption is still done by another standard. Symmetric just encrypts with one key. This is one of these tricky questions that make you think about other meanings in a question