nerdexam
(ISC)2

CCSP · Question #138

Although encryption can help an organization to effectively decrease the possibility of data breaches, which other type of threat can it increase the chances of?

The correct answer is B. Data loss. While encryption protects data confidentiality, it can increase the risk of data loss if encryption keys are lost or mishandled.

Submitted by takeshi77· Apr 18, 2026Cloud Data Security

Question

Although encryption can help an organization to effectively decrease the possibility of data breaches, which other type of threat can it increase the chances of?

Options

  • AInsecure interfaces
  • BData loss
  • CSystem vulnerabilities
  • DAccount hijacking

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    88% (28)
  • C
    6% (2)
  • D
    3% (1)

Why each option

While encryption protects data confidentiality, it can increase the risk of data loss if encryption keys are lost or mishandled.

AInsecure interfaces

Encryption itself does not inherently increase insecure interfaces; those are typically design or implementation flaws.

BData lossCorrect

If encryption keys are lost, corrupted, or become inaccessible, the encrypted data effectively becomes irretrievable, leading to data loss even if the storage medium itself is intact. Managing encryption keys, including secure storage, backup, and rotation, is a critical and complex aspect of any encryption strategy.

CSystem vulnerabilities

Encryption does not directly increase system vulnerabilities; rather, a poorly implemented encryption system could introduce vulnerabilities.

DAccount hijacking

Account hijacking relates to unauthorized access to user accounts, which is a separate threat not directly increased by the act of encrypting data.

Concept tested: Encryption risks; Key management

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview

Topics

#Encryption#Key Management#Data Loss#Risk Management

Community Discussion

No community discussion yet for this question.

Full CCSP Practice