CISSP: Certified Information Systems Security Professional

Question

A senior security engineer is responsible for ensuring the confidentiality and integrity of the organization’s most valuable personally identifiable information (PII). The data is kept on local file and database servers in the organization’s data center. The following security controls have been implemented to detect and log unauthorized access:

Network segmentation and enhanced access logging for the database and file servers
Encryption of data at rest
Full packet capture of network traffic entering and leaving the sensitive network segment
Backup of all transaction-log data and packet captures to a corporate backup appliance in the corporate backup network segment

Which of the following is the MOST likely method for exfiltrating PII while avoiding detection?

Explanation

Accessing the backup server through a compromised service account can expose backed-up PII without directly accessing the monitored database or file servers or sending traffic through the sensitive network segment, where enhanced logging and full packet capture would record the activity.

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ221

Community Discussion