nerdexam
GIAC

GSEC · Question #367

What technical control provides the most critical layer of defense if an intruder is able to bypass all physical security controls and obtain tapes containing critical data?

The correct answer is C. Encryption. Encryption is the definitive technical control protecting data confidentiality once an attacker has physical possession of backup tapes, rendering the data unreadable regardless of how it was obtained.

Defense in Depth and Protocols

Question

What technical control provides the most critical layer of defense if an intruder is able to bypass all physical security controls and obtain tapes containing critical data?

Options

  • ACamera Recordings
  • BSecurity guards
  • CEncryption
  • DShredding
  • ECorrective Controls

How the community answered

(36 responses)
  • A
    11% (4)
  • B
    3% (1)
  • C
    81% (29)
  • D
    6% (2)

Why each option

Encryption is the definitive technical control protecting data confidentiality once an attacker has physical possession of backup tapes, rendering the data unreadable regardless of how it was obtained.

ACamera Recordings

Camera recordings are a detective control that may document the breach after the fact but provide no protection for the data already in the attacker's hands.

BSecurity guards

Security guards are a physical preventive control that the scenario explicitly states have already been bypassed, so they offer no protection at this stage.

CEncryptionCorrect

Encryption protects data at rest by making the contents of stolen tapes computationally infeasible to read without the corresponding decryption key - even with full physical access to the media, the attacker cannot recover plaintext data, directly preserving confidentiality after all physical controls have failed.

DShredding

Shredding is a data destruction method applied at end-of-life for media, not a control applicable to tapes that are still in active use and have already been stolen.

ECorrective Controls

Corrective controls restore systems and operations after an incident but do not protect the confidentiality of data that an attacker already possesses.

Concept tested: Encryption as data-at-rest protection for backup media

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-111.pdf

Topics

#encryption#data protection#physical security#defense in depth

Community Discussion

No community discussion yet for this question.

Full GSEC Practice