Explain Security Threats in a Data Protection Environment DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which attack vector specifically targets the physical media used to store backup data?

   • ANetwork sniffing
   • BSocial engineering
   • CSQL injection
   • DBackup media theft
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which security threat is characterized by an employee with legitimate access to backup systems intentionally deleting or corrupting backup data?

   • AMan-in-the-middle attack
   • BPhishing
   • CRansomware
   • DInsider threat
   Reveal Solution Discussion Select an answer first
4. 3expert · hard · select all that apply

   A hospital's backup environment includes a primary backup server, a secondary backup server, and tape backups stored in a secure facility. The backup administrator discovers that an attacker gained access to the primary backup server via a phishing email and is now attempting to delete backup files. The secondary backup server is replicating correctly, and the tapes are current. Which of the following are potential threats to the data protection environment? (Select all that apply.)

   • APhishing as the initial attack vector
   • BNetwork vector from the attacker gaining access
   • CRansomware encrypting backup files
   • DInsider threat from the backup administrator
   • EAvailability threat due to potential deletion of backups
   Check answers Discussion Select an answer first
5. 4foundation · easy

   Which type of security threat is specifically designed to encrypt an organization's data and demand payment for the decryption key?

   • APhishing
   • BDistributed denial-of-service (DDoS)
   • CRansomware
   • DInsider threat
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does a ransomware attack primarily compromise the confidentiality of data in a data protection environment?

   • ABy tricking users into revealing their passwords through fake emails
   • BBy encrypting the data and making it unreadable without the decryption key
   • CBy flooding the network with traffic to slow down backup operations
   • DBy deleting all backup copies so that data cannot be restored
   Reveal Solution Discussion Select an answer first