CAS-005 Question #390: Real Exam Question with Answer & Explanation

Question

A help desk technician is troubleshooting an issue with an employee's laptop that will not boot into its operating system. The employee reported the laptop had been stolen but then found it one day later. The employee has asked the technician for help recovering important data. The technician has identified the following: - The laptop operating system was not configured with BitLocker. - The hard drive has no hardware failures. - Data is present and readable on the hard drive, although it appears to be illegible. Which of the following is the most likely reason the technician is unable to retrieve legible data from the hard drive?

Options

• AThe employee's password was changed, and the new password needs to be used.
• BThe PKI certificate was revoked, and a new one must be installed.
• CThe hard drive experienced crypto-shredding.
• DThe technician is using the incorrect cipher to read the data.

Explanation

Crypto-shredding is the most likely reason the technician is unable to retrieve legible data from the hard drive. Crypto-shredding occurs when the encryption keys used to access data are deleted or destroyed, making the data unreadable. In this case, it is possible that the hard drive was encrypted (either through BitLocker or another encryption method) and the keys were deleted after the laptop was stolen, rendering the data inaccessible and illegible without the

No community discussion yet for this question.