Question 14

B) Escrow

Escrow is a cryptographic solution that allows an organization to recover encrypted data even if the key has become corrupted or deleted. By storing a backup of the encryption keys in a secure escrow service, organizations can retrieve these keys when needed, thus ensuring data accessibility.

A) Self-signed certificates

Self-signed certificates are primarily used for establishing secure communications and do not provide a mechanism for data recovery if encryption keys are lost. They lack the infrastructure for key management and recovery that is integral to escrow solutions.

B) Escrow

Escrow is specifically designed for this purpose, as it allows for secure storage and retrieval of encryption keys. This ensures that even if the original keys are compromised or deleted, the organization can still access the encrypted data using the keys stored in escrow.

C) Tokenization

Tokenization involves replacing sensitive data with unique identification symbols (tokens) that retain essential information without compromising security. While it enhances security, it does not address the recovery of encrypted data after a key loss, making it unsuitable for this scenario.

D) Trusted Platform Module

The Trusted Platform Module (TPM) is a hardware-based security solution that provides secure generation and storage of cryptographic keys. However, if the keys are lost or deleted, TPM does not offer a recovery mechanism, which limits its effectiveness in this context.

Conclusion

Escrow is the only option that provides a viable method for recovering encrypted data after a key is corrupted or deleted, making it the definitive correct answer. In contrast, all other options fail to address the critical need for key recovery, emphasizing the unique importance of escrow in cryptographic solutions.