Discuss EC-Council 212-89 Exam Topic 9 Question 86

[Incident Handling and Response Process]

Your company holds a large amount of customer PH. and you want to protect those data from theft or unauthorized modification. Among other actions, you classify and encrypt the dat

a. In this process, which of the following OWASP security risks are you guarding against?

AInsecure deserialization

BSecurity misconfiguration

CBroken authentication

DSensitive data exposure

Suggested Answer: D

By classifying and encrypting customer Personally Identifiable Information (PHI), you are specifically guarding against the risk of Sensitive Data Exposure. This OWASP security risk involves the accidental or unlawful exposure of protected data to unauthorized individuals. Encryption serves as a critical defense mechanism by ensuring that, even if data is accessed without authorization, it remains unintelligible and useless to the attacker without the decryption keys. Data classification further supports this by identifying which data is sensitive and requires such protections, ensuring that appropriate security controls are applied to prevent exposure.

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

32 comments · newest first

Ona 6 months ago

I see your points, but A) Insecure deserialization could also be a concern if data is manipulated.

Bulah 6 months ago

True, Dana. But D is more relevant here. We need to focus on data protection.

Annita 6 months ago

I think B) Security misconfiguration is also a risk. Misconfigurations can lead to data leaks.

Noel 7 months ago

Definitely D. Encryption helps prevent unauthorized access.

Krissy 7 months ago

Agreed, Alice. Protecting PH data is crucial.

Gaston 7 months ago

I'm leaning towards D) Sensitive data exposure. It makes sense.

Cheryll 7 months ago

I don't see how broken authentication fits in this scenario.

Rebbecca 7 months ago

Wait, are we really sure about D? Seems a bit broad.

Jeannetta 7 months ago

I’m a bit confused about insecure deserialization. I don’t see how that connects to encrypting PHI. Maybe I’m missing something?

Corrinne 8 months ago

I practiced a similar question where encryption was tied to protecting sensitive data. I feel like D is the most relevant here.

Cristal 8 months ago

I’m not entirely sure, but I remember something about security misconfiguration being a risk too. Could it relate to how we handle the encryption settings?

Kristeen 8 months ago

I think we’re definitely guarding against sensitive data exposure since we’re encrypting customer PHI. That seems to fit the question well.

Lera 9 months ago

B. Security misconfiguration. Encryption can be a real pain if you don't have it set up right.

Rolland 9 months ago

D. Sensitive data exposure. Easy peasy, protect that PH data!

Dorsey 9 months ago

Hmm, I'd say C. Broken authentication. Gotta make sure those encryption keys are secure, you know?

Dana 9 months ago

D. Sensitive data exposure, no doubt. Wouldn't want those customer details falling into the wrong hands!

Devora 9 months ago

I'm going with B. Security misconfiguration. Encryption and classification can be tricky to set up properly.

Bronwyn 9 months ago

D. Sensitive data exposure makes the most sense here. Gotta protect that customer PH!

Margart 10 months ago

The correct answer is D. Sensitive data exposure.

Wilda 10 months ago

I'm a little confused on this one. I know encryption is important for data protection, but I'm not sure which specific OWASP risk it's addressing. I'll have to review my notes on the OWASP top 10 to make sure I choose the right answer.

Ramonita 10 months ago

Okay, I've got this. Encrypting the data is all about protecting sensitive information, so the right answer has to be D. Sensitive data exposure is the OWASP risk you're guarding against by classifying and encrypting the customer data.

Madelyn 10 months ago

Agreed, but A) Insecure deserialization could be a concern too.

Huey 10 months ago

I think B) Security misconfiguration is also a big risk here.

Gayla 11 months ago

Easy peasy! Encrypting the data is all about protecting sensitive information from exposure, so the answer is clearly D. Sensitive data exposure is the OWASP risk you're addressing by taking these security measures.

Albina 11 months ago

Definitely guarding against D) Sensitive data exposure.

Lili 11 months ago

Hmm, I'm a bit unsure about this one. Encrypting the data could also help prevent security misconfigurations, so I'm not sure if B or D is the right answer. I'll have to think this through a bit more.

Mirta 11 months ago

I think this is asking about the OWASP security risks that are relevant to protecting sensitive customer data. Encrypting the data would help guard against sensitive data exposure, so I'm going to go with option D.

Fidelia 4 months ago

↳ replying to Mirta

They are, but D is the most critical for this situation.

Dwight 6 months ago

↳ replying to Mirta

What about the other options? Are they not relevant?

Verona 6 months ago

↳ replying to Mirta

Encrypting definitely helps with that.

Kaycee 6 months ago

↳ replying to Mirta

Yeah, sensitive data exposure is a big risk.

Shaunna 10 months ago

↳ replying to Mirta

I agree, option D makes the most sense.

EC-Council 212-89 Exam - Topic 9 Question 86 Discussion