nerdexam
GIAC

GSLC · Question #203

You are responsible for securing the network at a law firm. They are particularly interested in ensuring that sensitive documents are not disclosed to outside parties. In securing the printers and…

The correct answer is A. Wireless printers can be compromised by a hacker. C. Immediately after an image has been scanned you can 'ghost' that document/image. D. Secure hard drives in printers, since they can store copies of documents. Printers and scanners pose multiple data security risks including wireless interception, residual image data (ghosting), and document copies stored on internal hard drives.

Security Architecture & Engineering

Question

You are responsible for securing the network at a law firm. They are particularly interested in ensuring that sensitive documents are not disclosed to outside parties. In securing the printers and scanners, which of the following statements are true? Each correct answer represents a complete solution. Choose three.

Options

  • AWireless printers can be compromised by a hacker.
  • BGhosting of documents is the only real security issue with scanners and copiers.
  • CImmediately after an image has been scanned you can 'ghost' that document/image.
  • DSecure hard drives in printers, since they can store copies of documents.
  • EPrinters only have temporary data storage, so it is not possible to get data from a printer after a

How the community answered

(25 responses)
  • A
    76% (19)
  • B
    16% (4)
  • E
    8% (2)

Why each option

Printers and scanners pose multiple data security risks including wireless interception, residual image data (ghosting), and document copies stored on internal hard drives.

AWireless printers can be compromised by a hacker.Correct

Wireless printers communicate over Wi-Fi and can be intercepted or compromised by attackers who gain access to the same network segment or exploit weak wireless security configurations.

BGhosting of documents is the only real security issue with scanners and copiers.

Ghosting is not the only security concern with scanners and copiers; stored hard drive data and wireless interception are equally significant risks.

CImmediately after an image has been scanned you can 'ghost' that document/image.Correct

Ghosting occurs when a faint residual image of a previously scanned document remains accessible; overwriting or clearing the scan buffer immediately after use mitigates this risk.

DSecure hard drives in printers, since they can store copies of documents.Correct

Modern printers contain internal hard drives that cache copies of printed and scanned documents, which can be forensically retrieved if drives are not encrypted or securely wiped.

EPrinters only have temporary data storage, so it is not possible to get data from a printer after a

Printers do not use only temporary storage - many enterprise printers contain persistent hard drives that retain document images even after jobs complete, making data extraction possible.

Concept tested: Physical device data security for printers and scanners

Source: https://www.cisa.gov/sites/default/files/publications/Securing_Network_Infrastructure_Devices_S508C.pdf

Topics

#printer security#physical device hardening#data leakage#wireless printer vulnerabilities

Community Discussion

No community discussion yet for this question.

Full GSLC Practice