Question 1

Refer to the information below to answer the question.

During the investigation of a security incident, it is determined that an unauthorized individual accessed a system which hosts a database containing financial information.

Aside from the potential records which may have been viewed, which of the following should be the PRIMARY concern regarding the database information?

Options :

A : Unauthorized database changes

B : Integrity of security logs

C : Availability of the database

D : Confidentiality of the incident

Answer: A

Question 2

Which of the following is a key responsibility for a data steward assigned to manage an enterprise data lake?

Options :

A : Ensure proper business definition, value, and usage of data collected and stored within the enterprise data lake.

B : Ensure proper and identifiable data owners for each data element stored within an enterprise data lake.

C : Ensure adequate security controls applied to the enterprise data lake.

D : Ensure that any data passing within remit is being used in accordance with the rules and regulations of the business.

Answer: A

Question 3

A company is enrolled in a hard drive reuse program where decommissioned equipment is sold back to the vendor when it is no longer needed. The vendor pays more money for functioning drives than equipment that is no longer operational. Which method of data sanitization would provide the most secure means of preventing unauthorized data loss, while

also receiving the most money from the vendor?

Options :

A : Pinning

B : Single-pass wipe

C : Degaussing

D : Multi-pass wipes

Answer: C

Question 4

employee training, risk management, and data handling procedures and policies could be characterized as which type of security measure?

Options :

A : Non-essential

B : Management

C : Preventative

D : Administrative

Answer: D

Question 5

Which of the following is true of Service Organization Control (SOC) reports?

Options :

A : SOC 1 Type 2 reports assess the security, confidentiality, integrity, and availability of an organization-s controls

B : SOC 2 Type 2 reports include information of interest to the service organization-s management

C : SOC 2 Type 2 reports assess internal controls for financial reporting

D : SOC 3 Type 2 reports assess internal controls for financial reporting

Answer: B

Higher Test Marks with Free Online CISSP Exam Practice

Buying Options: