CCSP · Question #138
Although encryption can help an organization to effectively decrease the possibility of data breaches, which other type of threat can it increase the chances of?
The correct answer is B. Data loss. While encryption protects data confidentiality, it can increase the risk of data loss if encryption keys are lost or mishandled.
Question
Although encryption can help an organization to effectively decrease the possibility of data breaches, which other type of threat can it increase the chances of?
Options
- AInsecure interfaces
- BData loss
- CSystem vulnerabilities
- DAccount hijacking
How the community answered
(32 responses)- A3% (1)
- B88% (28)
- C6% (2)
- D3% (1)
Why each option
While encryption protects data confidentiality, it can increase the risk of data loss if encryption keys are lost or mishandled.
Encryption itself does not inherently increase insecure interfaces; those are typically design or implementation flaws.
If encryption keys are lost, corrupted, or become inaccessible, the encrypted data effectively becomes irretrievable, leading to data loss even if the storage medium itself is intact. Managing encryption keys, including secure storage, backup, and rotation, is a critical and complex aspect of any encryption strategy.
Encryption does not directly increase system vulnerabilities; rather, a poorly implemented encryption system could introduce vulnerabilities.
Account hijacking relates to unauthorized access to user accounts, which is a separate threat not directly increased by the act of encrypting data.
Concept tested: Encryption risks; Key management
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview
Topics
Community Discussion
No community discussion yet for this question.