SNIA
S10-210 · Question #94
Your company uses a cryptographic key system to encrypt tapes. After several years of use and thousands of tapes shipped to off-site locations, an IT audit reveals that encryption keys have been…
The correct answer is C. All data encrypted with the keys exposed as ciphertext should be re-keyed (decrypted and. See the full explanation below for the reasoning.
Question
Your company uses a cryptographic key system to encrypt tapes. After several years of use and thousands of tapes shipped to off-site locations, an IT audit reveals that encryption keys have been inadvertently stored as ciphertext on file shares to which everyone in the company has read permissions. Which response reflects industry best practice?
Options
- AAll data encrypted with the keys exposed as ciphertext should be considered safe.
- BAll data encrypted with the keys exposed as ciphertext and not yet sent off-site as an
- CAll data encrypted with the keys exposed as ciphertext should be re-keyed (decrypted and
- DAll data encrypted with the keys exposed as ciphertext should be considered safe as
How the community answered
(34 responses)- A6% (2)
- B12% (4)
- C79% (27)
- D3% (1)
Community Discussion
No community discussion yet for this question.