nerdexam
(ISC)2

HCISPP · Question #17

Which of the following represents the GREATEST risk to data confidentiality?

The correct answer is C. Backup tapes are generated unencrypted. Unencrypted backup tapes represent the greatest risk to data confidentiality because physical media can be lost, stolen, or intercepted in transit, exposing sensitive data to anyone who handles the tapes - no hacking required. Option A (no network redundancy) threatens…

Risk Management and Risk Assessment

Question

Which of the following represents the GREATEST risk to data confidentiality?

Options

  • ANetwork redundancies are not implemented
  • BSecurity awareness training is not completed
  • CBackup tapes are generated unencrypted
  • DUsers have administrative privileges

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    60% (12)
  • D
    25% (5)

Explanation

Unencrypted backup tapes represent the greatest risk to data confidentiality because physical media can be lost, stolen, or intercepted in transit, exposing sensitive data to anyone who handles the tapes - no hacking required. Option A (no network redundancy) threatens availability, not confidentiality. Option B (missing security awareness training) is a process gap that increases risk indirectly but is not itself a direct confidentiality exposure. Option D (admin privileges) is a serious concern for integrity and access control, but privilege misuse requires an active actor, whereas unencrypted tapes are passively vulnerable the moment they leave the building.

Memory tip: Tie "confidentiality" to "can someone read the data without authorization?" - unencrypted tapes answer that with a flat yes, making C the most direct and unambiguous threat.

Topics

#Data Encryption#Backup Security#Confidentiality#Data at Rest

Community Discussion

No community discussion yet for this question.

Full HCISPP Practice