nerdexam
CSA

CCSK · Question #96

The key concern of data backup and recovery schemes is:

The correct answer is B. They must prevent data loss, unwanted data overwrite and destruction. The primary goal of any backup and recovery scheme is to prevent data loss, protect against unwanted overwrites, and guard against destruction of data.

Cloud Data Security

Question

The key concern of data backup and recovery schemes is:

Options

  • AData aggregation should not cause breaches
  • BThey must prevent data loss, unwanted data overwrite and destruction
  • CAssurance that cloud provider has multiple data centers for disaster recover
  • DAssurance that deleted data is in fact unrecoverable
  • EData should not be commingled with other customers

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    74% (20)
  • D
    15% (4)
  • E
    7% (2)

Why each option

The primary goal of any backup and recovery scheme is to prevent data loss, protect against unwanted overwrites, and guard against destruction of data.

AData aggregation should not cause breaches

Data aggregation and breach prevention are data governance concerns, not the primary purpose of backup and recovery schemes.

BThey must prevent data loss, unwanted data overwrite and destructionCorrect

Data backup and recovery schemes are fundamentally designed to ensure data integrity and availability by preventing loss from failures, preventing accidental or malicious overwrites of valid data, and protecting against deliberate or accidental destruction. This encompasses the full scope of threats that backup strategies must address, covering availability and integrity as core data security principles.

CAssurance that cloud provider has multiple data centers for disaster recover

Multiple data centers support disaster recovery objectives but are a provider capability, not the core concern of the backup and recovery scheme itself.

DAssurance that deleted data is in fact unrecoverable

Ensuring deleted data is unrecoverable is a data sanitization or data destruction concern, which is separate from backup and recovery.

EData should not be commingled with other customers

Data commingling is a multi-tenancy isolation concern, not a concern specific to backup and recovery design.

Concept tested: Data backup and recovery objectives and goals

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#data backup#disaster recovery#data loss prevention#data integrity

Community Discussion

No community discussion yet for this question.

Full CCSK Practice