Explain Security Threats in a Data Protection Environment DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   A technology startup's backup administrator receives an email that appears to be from the CEO, requesting that backup credentials be sent to an external email address. The administrator complies, and later the backup system is accessed by an unauthorized party. Which type of threat is this?

   • AInsider threat
   • BDenial of service
   • CRansomware
   • DPhishing
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A bank's backup administrator notices that an attacker exploited a vulnerability in the backup storage system's firmware to gain access and exfiltrate data. Which attack vector is this?

   • AInsider threat vector
   • BNetwork vector
   • CStorage vector
   • DBackup media vector
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   A media company's backup administrator notices that a backup tape was stolen from a courier vehicle. The tape contains unencrypted customer data. Which attack vector introduced this security threat to the data protection environment?

   • AStorage vector
   • BInsider threat vector
   • CBackup media vector
   • DNetwork vector
   Reveal Solution Discussion Select an answer first