Exam 312-50v11 topic 1 question 35 discussion

By using a courier to transport, you transfer the risk of having the tapes stolen in your way home, and you could also contract insurance. If the tapes are encrypted, I see this one as the best option... so I would mark D.

A is correct, using a corrier could cause another risk.

It is A because the courie is not considered trusted that he should put it in a lock box

B and C are eliminated so the correct answers are A and D

A. Encrypt the backup tapes and transport them in a lock box. I think this is a question trick because: Module 02 Page 241 from CEH v12 book: "Impersonation is a technique whereby an attacker pretends to be a legitimate or authorized person. Attackers perform impersonation attacks personally or use phones or other communication media to mislead targets and trick them into revealing information. The attacker might impersonate a ****courier/delivery person***"

D. Encrypt the backup tapes and use a courier to transport them. This option combines encryption, which protects the data on the tapes, with the use of a courier service, which provides a secure and controlled method of transportation. Encrypting the backup tapes ensures that even if they were to fall into the wrong hands, the data would remain confidential and secure. Using a courier adds an additional layer of protection compared to transporting the tapes personally.

The first is to make sure he gets to the right place Secondly, even if the tape is stolen on the way, there is no need to worry about the data being read. Since TAPE is encrypted, what does it matter if the box is locked or not?

A and D Encrypting the backup tapes ensures that even if the tapes are lost or stolen during transit, the data remains secure and unreadable without the encryption key. Transporting the encrypted backup tapes in a lock box adds an additional layer of physical security. Using a courier service to transport the encrypted backup tapes ensures a secure and controlled method of delivery. Couriers are experienced in handling sensitive and valuable items and can provide tracking and chain of custody documentation. Both options involve encryption and secure transportation, which are key factors in maintaining data security during transit. Since the question mentions "what two things" it could mean you can select 2 options

I agree with others on transferring the risk to the courier, but I also disagree with keeping the backups home!

I think it's D. You're transferring the risk to the courier

If the lock is needed the encryptio should be changed

A is the best answer from given options.

Who will transport them ? (A) .. IT Manager itself or Courier ?

Using a third party increases risk and time. Better use encryption and a lockbox. In this case offsite could be a trusted employees home, given the employee have been trained and signed adequate forms, also have been vetted.

A is correct