GSEC · Question #367
What technical control provides the most critical layer of defense if an intruder is able to bypass all physical security controls and obtain tapes containing critical data?
The correct answer is C. Encryption. Encryption is the definitive technical control protecting data confidentiality once an attacker has physical possession of backup tapes, rendering the data unreadable regardless of how it was obtained.
Question
What technical control provides the most critical layer of defense if an intruder is able to bypass all physical security controls and obtain tapes containing critical data?
Options
- ACamera Recordings
- BSecurity guards
- CEncryption
- DShredding
- ECorrective Controls
How the community answered
(36 responses)- A11% (4)
- B3% (1)
- C81% (29)
- D6% (2)
Why each option
Encryption is the definitive technical control protecting data confidentiality once an attacker has physical possession of backup tapes, rendering the data unreadable regardless of how it was obtained.
Camera recordings are a detective control that may document the breach after the fact but provide no protection for the data already in the attacker's hands.
Security guards are a physical preventive control that the scenario explicitly states have already been bypassed, so they offer no protection at this stage.
Encryption protects data at rest by making the contents of stolen tapes computationally infeasible to read without the corresponding decryption key - even with full physical access to the media, the attacker cannot recover plaintext data, directly preserving confidentiality after all physical controls have failed.
Shredding is a data destruction method applied at end-of-life for media, not a control applicable to tapes that are still in active use and have already been stolen.
Corrective controls restore systems and operations after an incident but do not protect the confidentiality of data that an attacker already possesses.
Concept tested: Encryption as data-at-rest protection for backup media
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-111.pdf
Topics
Community Discussion
No community discussion yet for this question.