Your Company Uses a Cryptographic Key System to Encrypt Tapes

question 16

Multiple Choice

Your company uses a cryptographic key system to encrypt tapes. After several years of use and thousands of tapes shipped to off-site locations, an IT audit reveals that encryption keys have been inadvertently stored as ciphertext on file shares to which everyone in the company has read permissions. Which response reflects industry best practice?

• A) All data encrypted with the keys exposed as ciphertext should be considered safe.
• B) All data encrypted with the keys exposed as ciphertext and not yet sent off-site as an encrypted tape should be re-keyed (decrypted and re-encrypted using a new key).
• C) All data encrypted with the keys exposed as ciphertext should be re-keyed (decrypted and re-encrypted using a new key).
• D) All data encrypted with the keys exposed as ciphertext should be considered safe as ciphertext is very difficult to use.

---

Definitions:

Primary Intervention

Preventive strategies or actions taken to address potential issues before they become significant problems, often used in healthcare, psychology, and education.

Mental Health

A state of well-being in which an individual realizes their own abilities, can cope with the normal stresses of life, can work productively, and is able to make a contribution to their community.

Career Counseling

A guidance process that helps individuals understand their interests, strengths, values, and skills to make informed career-related decisions.

Domain Sensitive Approach

A method or strategy that takes into account the specific characteristics or requirements of a particular area or field of study.