Question 1

A security manager is performing a risk assessment on a data center. The security manager has determined that unauthorized personnel can enter the data center through the loading dock door and shut off utility power to the building. This finding is known as a:

Options :

A : Vulnerability

B : Threat

C : Risk

D : Probability

Answer: B

Question 2

An organization relying on physical access controls has migrated its on-premises applications to cloud service providers. What

compensating control should be enacted for access to cloud-based applications since physical access is less of a factor?

Options :

A : Multifactor authentication

B : Single sign-on

C :

Reduced sign-on

D :

Biometrics

Answer: A

Question 3

An organization performs annual true-ups of its data inventory and finds numerous discrepancies. What change should be undertaken to

reduce or eliminate these discrepancies?

Options :

A : Increase the frequency of data inventory.

B : Automate the data inventory with daily scans.

C : Incorporate data inventory updates into the change management process.

D : Implement dynamic DLP.

Answer: B

Question 4

Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

Options :

A : It eliminates cryptographic key collision.

B : It minimizes the risk if the cryptographic key is compromised.

C : It is more practical and efficient to use a single cryptographic key.

D : Each process can only be supported by its own unique key management process.

Answer: C

Question 5

Which of the following processes BEST enables an organization to maintain the quality of personal data?

Options :

A : Implementing routine automatic validation

B : Maintaining hashes to detect changes in data

C : Encrypting personal data at rest

D : Updating the data quality standard through periodic review

Answer: D

Higher Test Marks with Free Online CDPSE Exam Practice

Buying Options: