312-50V10 · Question #774
Jim's company regularly performs backups of their critical servers. But the company cannot afford to send backup tapes to an off-site vendor for long-term storage and archiving. Instead, Jim's company
The correct answer is A. Encrypt the backup tapes and transport them in a lock box.. Encrypting backup tapes protects data confidentiality if the media is lost or stolen, and a lock box provides physical access control during transit.
Question
Jim's company regularly performs backups of their critical servers. But the company cannot afford to send backup tapes to an off-site vendor for long-term storage and archiving. Instead, Jim's company keeps the backup tapes in a safe in the office. Jim's company is audited each year, and the results from this year's audit show a risk because backup tapes are not stored off-site. The Manager of Information Technology has a plan to take the backup tapes home with him and wants to know what two things he can do to secure the backup tapes while in transit?
Options
- AEncrypt the backup tapes and transport them in a lock box.
- BDegauss the backup tapes and transport them in a lock box.
- CHash the backup tapes and transport them in a lock box.
- DEncrypt the backup tapes and use a courier to transport them.
How the community answered
(33 responses)- A85% (28)
- B3% (1)
- C9% (3)
- D3% (1)
Why each option
Encrypting backup tapes protects data confidentiality if the media is lost or stolen, and a lock box provides physical access control during transit.
Encryption renders the data on the tapes unreadable to anyone who does not possess the decryption key, directly addressing confidentiality risk if the tapes are lost or intercepted during transit. Transporting the tapes in a locked box adds a physical security layer that controls access to the media itself, satisfying both logical and physical security requirements for off-site transport.
Degaussing uses a strong magnetic field to erase all data from the tapes, which would destroy the backup content and make the tapes useless for their intended recovery purpose.
Hashing verifies data integrity by detecting unauthorized modification or corruption but provides no confidentiality protection - the data remains fully readable to anyone who obtains the tape.
Using a courier without a lock box provides no physical containment or access control for the tapes themselves, as a courier service does not guarantee the media is secured against interception or loss.
Concept tested: Backup media security - encryption and physical controls in transit
Source: https://csrc.nist.gov/publications/detail/sp/800-111/final
Topics
Community Discussion
No community discussion yet for this question.