Your Company Uses a Cryptographic Key System to Encrypt Tapes

question 16

Multiple Choice

Your company uses a cryptographic key system to encrypt tapes. After several years of use and thousands of tapes shipped to off-site locations, an IT audit reveals that encryption keys have been inadvertently stored as ciphertext on file shares to which everyone in the company has read permissions. Which response reflects industry best practice?

• A) All data encrypted with the keys exposed as ciphertext should be considered safe.
• B) All data encrypted with the keys exposed as ciphertext and not yet sent off-site as an encrypted tape should be re-keyed (decrypted and re-encrypted using a new key).
• C) All data encrypted with the keys exposed as ciphertext should be re-keyed (decrypted and re-encrypted using a new key).
• D) All data encrypted with the keys exposed as ciphertext should be considered safe as ciphertext is very difficult to use.

---

Definitions:

Standard Price

A predetermined price established by a company for a product or service, used for budgeting and cost control purposes.

Unfavourable Variances

Unfavourable Variances are cost or revenue variances that indicate a business is performing worse than its budgeted or planned figures.

Cost of Goods Sold

The total cost of manufacturing and delivering a product to a consumer, including raw materials, labor, and other direct costs associated with production.

Credit Entry

An accounting entry that increases a credit account or decreases a debit account, representing the source of funds or value entry in a financial transaction.