Explain Security Threats in a Data Protection Environment DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A government agency's backup environment includes a primary backup server, a secondary backup server, and tape backups stored in a secure facility. The backup administrator discovers that an attacker gained access to the primary backup server and is exfiltrating sensitive data. The secondary backup server is replicating correctly, and the tapes are current. Which aspect of the CIA triad is most directly compromised?

   • AAuthenticity, because the attacker may impersonate the system
   • BIntegrity, because the attacker may modify data
   • CConfidentiality, because sensitive data is being exfiltrated
   • DAvailability, because the attacker may delete data
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which security threat directly compromises the integrity of data in a data protection environment?

   • AA distributed denial-of-service (DDoS) attack overwhelms the backup server
   • BAn attacker modifies backup files to inject malicious code
   • CA power outage causes the backup system to shut down
   • DA phishing email tricks a user into revealing their backup credentials
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A university's IT team discovers that a backup administrator accidentally configured backup jobs to overwrite the previous day's backups. This misconfiguration has been running for a week, and now only the latest backup is available. Which type of threat does this represent?

   • AMalware
   • BRansomware
   • CInsider threat
   • DHuman error
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A retail company's backup administrator discovers that an attacker gained access to the backup storage network and modified backup files, inserting malicious code. The company later restored from these backups, and the malicious code executed in the production environment. Which aspect of the CIA triad is most directly compromised?

   • AIntegrity
   • BAuthenticity
   • CConfidentiality
   • DAvailability
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A government agency's backup administrator notices that an attacker exploited a vulnerability in the backup management software to gain remote access and exfiltrate backup data. Which attack vector is this?

   • AStorage vector
   • BBackup media vector
   • CNetwork vector
   • DInsider threat vector
   Reveal Solution Discussion Select an answer first