An Information Rights Management (IRM) solution is described as providing 'persistent protection'. Which statement best captures what persistent protection means for a protected document?
- AThe document is kept permanently encrypted at rest inside the content repository and is decrypted only while a user has it open on screen.
- BA full audit log of every open, edit and print is retained indefinitely so that access can be reconstructed at any later date.
- CThe rights policy is cached on the endpoint so the file can still be opened after the licence server is decommissioned.
- DAccess controls and usage rights travel inside the file itself, so they continue to be enforced after the file leaves the repository or is copied elsewhere. Correct
Why A is wrong: This describes repository encryption at rest, which protects only while the file stays in the store; it is tempting but persistence means the policy travels with the file after it leaves.
Why B is wrong: IRM does log usage, but persistent protection refers to enforcement travelling with the object, not to how long audit records are kept.
Why C is wrong: This confuses persistence with permanent offline availability; IRM typically still requires policy or key validation, and removing the server usually revokes access rather than guaranteeing it.
Why D is correct: Persistent protection binds encryption and a rights policy to the object, so controls follow the file wherever it goes rather than depending on the store it came from.