nerdexam
EC-Council

312-50V10 · Question #774

Jim's company regularly performs backups of their critical servers. But the company cannot afford to send backup tapes to an off-site vendor for long-term storage and archiving. Instead, Jim's company

The correct answer is A. Encrypt the backup tapes and transport them in a lock box.. Encrypting backup tapes protects data confidentiality if the media is lost or stolen, and a lock box provides physical access control during transit.

Cryptography

Question

Jim's company regularly performs backups of their critical servers. But the company cannot afford to send backup tapes to an off-site vendor for long-term storage and archiving. Instead, Jim's company keeps the backup tapes in a safe in the office. Jim's company is audited each year, and the results from this year's audit show a risk because backup tapes are not stored off-site. The Manager of Information Technology has a plan to take the backup tapes home with him and wants to know what two things he can do to secure the backup tapes while in transit?

Options

  • AEncrypt the backup tapes and transport them in a lock box.
  • BDegauss the backup tapes and transport them in a lock box.
  • CHash the backup tapes and transport them in a lock box.
  • DEncrypt the backup tapes and use a courier to transport them.

How the community answered

(33 responses)
  • A
    85% (28)
  • B
    3% (1)
  • C
    9% (3)
  • D
    3% (1)

Why each option

Encrypting backup tapes protects data confidentiality if the media is lost or stolen, and a lock box provides physical access control during transit.

AEncrypt the backup tapes and transport them in a lock box.Correct

Encryption renders the data on the tapes unreadable to anyone who does not possess the decryption key, directly addressing confidentiality risk if the tapes are lost or intercepted during transit. Transporting the tapes in a locked box adds a physical security layer that controls access to the media itself, satisfying both logical and physical security requirements for off-site transport.

BDegauss the backup tapes and transport them in a lock box.

Degaussing uses a strong magnetic field to erase all data from the tapes, which would destroy the backup content and make the tapes useless for their intended recovery purpose.

CHash the backup tapes and transport them in a lock box.

Hashing verifies data integrity by detecting unauthorized modification or corruption but provides no confidentiality protection - the data remains fully readable to anyone who obtains the tape.

DEncrypt the backup tapes and use a courier to transport them.

Using a courier without a lock box provides no physical containment or access control for the tapes themselves, as a courier service does not guarantee the media is secured against interception or loss.

Concept tested: Backup media security - encryption and physical controls in transit

Source: https://csrc.nist.gov/publications/detail/sp/800-111/final

Topics

#backup encryption#data in transit#tape security#physical protection

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice