Certified Ethical Hacker (CEH v11) — Question 271

Jim's company regularly performs backups of their critical servers. But the company cannot afford to send backup tapes to an off-site vendor for long-term storage and archiving. Instead, Jim's company keeps the backup tapes in a safe in the office. Jim's company is audited each year, and the results from this year's audit show a risk because backup tapes are not stored off-site. The Manager of Information Technology has a plan to take the backup tapes home with him and wants to know what two things he can do to secure the backup tapes while in transit?

Answer options

• A. Encrypt the backup tapes and transport them in a lock box.
• B. Degauss the backup tapes and transport them in a lock box.
• C. Hash the backup tapes and transport them in a lock box.
• D. Encrypt the backup tapes and use a courier to transport them.

Correct answer: A

Explanation

The correct answer is A, as encrypting the backup tapes ensures that the data is secure from unauthorized access while in transit, and using a lock box adds a physical layer of security. Options B and C do not provide adequate protection during transport, as degaussing destroys data and hashing does not prevent unauthorized access. Option D, while it suggests encryption, relies on a courier service, which might introduce additional risks compared to personally securing the tapes.