easyMultiple ChoiceObjective-mapped
CISSP Practice Question: Needs to ensure that backup tapes containing…
An organization needs to ensure that backup tapes containing sensitive data are protected during transportation between sites. What is the most effective control?
⚠ Common exam trap
A common mix-up: candidates choose a physical security control (like tamper-evident seals or bonded couriers) thinking it is sufficient, but the CISSP exam emphasizes that data-centric controls (encryption) are the most effective for protecting data in transit, as physical controls can be bypassed or fail.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Encrypting the backup tapes
Encrypting the backup tapes ensures that even if the physical media is lost, stolen, or intercepted during transit, the sensitive data remains unreadable without the decryption key. This provides a strong, data-centric security control that protects confidentiality regardless of the physical security measures in place. Encryption is the most effective control because it directly addresses the risk of unauthorized access to the data itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Applying tamper-evident seals
Why it's wrong here
Applying tamper-evident seals provides an audit trail for physical integrity, indicating if a container or device has been opened or manipulated. However, these seals do not encrypt or obscure the data itself, meaning an unauthorized individual who gains physical access to the tape can still read its contents once the seal is broken, even if the breach is later detected. This method addresses physical integrity and detectability of tampering, not data confidentiality.
- ✓
Encrypting the backup tapes
Why this is correct
Encrypting backup tapes is the most effective method to ensure data confidentiality, both when the tapes are at rest and during transit. This process transforms the data into an unreadable format, making it unintelligible to anyone without the proper decryption key. Even if a tape is lost or stolen, the sensitive information remains protected from unauthorized disclosure, directly addressing the need to prevent data exposure.
- ✗
Using a chain of custody log
Why it's wrong here
A chain of custody log meticulously documents the physical handling and transfer of backup tapes, establishing accountability for their location and possession over time. While crucial for auditing, forensic investigations, and proving who had control of the media, it does not implement any technical control to prevent unauthorized access to the data itself. The log merely records events; it does not encrypt or otherwise secure the data's confidentiality.
- ✗
Using a bonded courier service
Why it's wrong here
Employing a bonded courier service enhances the physical security of backup tapes during transit by reducing the risk of loss or theft through professional handling and insurance. While this mitigates some physical security risks associated with transportation, it does not provide any inherent protection for the data's confidentiality if the tape is still compromised, lost, or stolen despite the courier's efforts. The data on the tape remains unencrypted and vulnerable to exposure if accessed by an unauthorized party.
Go deeper
Related to this question
Learn chapter
Security Governance and Principles
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
About these practice questions
One of 747 original CISSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.