nerdexam
CompTIA

CAS-002 · Question #302

A security consultant is investigating acts of corporate espionage within an organization. Each time the organization releases confidential information to high-ranking engineers, the information is…

The correct answer is A. Digital watermarking. Digital watermarking embeds unique, hidden identifiers into documents so that if a copy is leaked, the watermark reveals which recipient's copy was the source.

Enterprise Security

Question

A security consultant is investigating acts of corporate espionage within an organization. Each time the organization releases confidential information to high-ranking engineers, the information is soon leaked to competing companies. Which of the following techniques should the consultant use to discover the source of the information leaks?

Options

  • ADigital watermarking
  • BSteganography
  • CEnforce non-disclosure agreements
  • DDigital rights management

How the community answered

(34 responses)
  • A
    82% (28)
  • B
    6% (2)
  • C
    9% (3)
  • D
    3% (1)

Why each option

Digital watermarking embeds unique, hidden identifiers into documents so that if a copy is leaked, the watermark reveals which recipient's copy was the source.

ADigital watermarkingCorrect

Digital watermarking assigns a unique, imperceptible marker to each copy of a confidential document distributed to different recipients. When a leak occurs, forensic analysis of the leaked document reveals whose watermarked copy was disclosed, directly identifying the source of the leak.

BSteganography

Steganography conceals secret messages inside other data for covert communication, but it does not embed traceable identifiers that identify which recipient leaked a document.

CEnforce non-disclosure agreements

NDAs are a legal deterrent and contractual obligation, but they do not provide a technical mechanism to identify which individual is responsible for an active leak.

DDigital rights management

Digital rights management controls access and usage permissions for content, but it does not create unique per-recipient markers that can forensically trace a leaked copy back to its source.

Concept tested: Digital watermarking for leak source attribution

Source: https://www.nist.gov/system/files/documents/2017/05/09/NIST.SP.800-188.pdf

Topics

#digital watermarking#insider threat#data leakage#corporate espionage

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice