Explain Security Threats in a Data Protection Environment DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which attack vector is most commonly used to introduce malware into a data protection environment by tricking a user into opening a malicious attachment?

   • ADenial-of-service (DoS) attack
   • BPhishing email
   • CPhysical theft of backup tapes
   • DStorage area network (SAN) misconfiguration
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A manufacturing company's backup environment includes a primary backup server, a secondary backup server, and tape backups stored offsite. The backup administrator discovers that an attacker gained access to the primary backup server via a vulnerability in the backup management software and is now attempting to delete backup files. The secondary backup server is replicating correctly, and the offsite tapes are current. Which attack vector is the most immediate threat to the data protection environment?

   • AInsider threat vector, because the vulnerability was introduced by an insider
   • BStorage vector, because the attacker is targeting the backup storage
   • CBackup media vector, because the tapes are stored offsite
   • DNetwork vector, because the attacker used a vulnerability in the software
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A financial firm's backup administrator discovers that a disgruntled former employee, who still had valid credentials, logged into the backup management console and deleted several backup jobs. The backups for the last quarter are now missing. Which aspect of the CIA triad is most directly compromised by this insider threat?

   • AConfidentiality
   • BAvailability
   • CNon-repudiation
   • DIntegrity
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A hospital's backup administrator discovers that a backup file was altered by an attacker who gained access to the backup storage. The attacker changed the file to include incorrect patient records. The hospital has a legal obligation to maintain accurate medical records. Which aspect of the CIA triad is most directly compromised, and what is the primary impact?

   • AIntegrity, leading to potential legal and regulatory consequences
   • BAuthenticity, leading to loss of trust in the backup system
   • CConfidentiality, leading to unauthorized disclosure of patient data
   • DAvailability, leading to inability to access patient data
   Reveal Solution Discussion Select an answer first
6. 10expert · hard · select all that apply

   A company's backup administrator discovers that an attacker gained access to the backup storage and encrypted all backup files. The company has offsite tapes that are not encrypted. Which of the following are potential threats to the data protection environment? (Select all that apply.)

   • ANetwork vector from the attacker gaining access
   • BInsider threat from the backup administrator
   • CRansomware encrypting backup files
   • DBackup media vector from offsite tapes
   • EAvailability threat due to encrypted backups
   Check answers Discussion Select an answer first