A company wants to ensure that encrypted data can be recovered if an employee's encryption credentials are lost or become inaccessible. Which of the following is the BEST solution to achieve this goal?
Implementing key escrow allows the company to securely store copies of encryption keys with a trusted entity. This ensures that if the original keys are lost or an employee leaves, the company can retrieve the keys from escrow to access the encrypted data. Other options like digital signatures, multifactor authentication, and enforcing strict password policies do not provide a mechanism for recovering lost encryption keys and therefore cannot ensure access to the encrypted data under such circumstances.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is key escrow?
Open an interactive chat with Bash
How does key escrow differ from digital signatures?
Open an interactive chat with Bash
Why can't multifactor authentication help with lost encryption keys?