A system owner has requested support from data owners to evaluate options for the disposal of equipment containing sensitive data. Regulatory requirements state the data must be rendered unrecoverable via logical means or physically destroyed. Which of the following factors is the regulation intended to address?

• A.Sovereignty
• B.E-waste
• C.Remanence
• D.Deduplication

Comment: *

Name: *

Email: *

Verification: *

The Chief Information Officer (CIO) wants to increase security and accessibility among the organization's cloud SaaS applications. The applications are configured to use passwords, and two-factor authentication is not provided natively.
Which of the following would BEST address the CIO's concerns?

• A.Procure a password manager for the employees to use with the cloud applications.
• B.Deploy applications internally and migrate away from SaaS applications.
• C.Create a VPN tunnel between the on-premises environment and the cloud providers.
• D.Implement an IdP that supports SAML and time-based, one-time passwords.

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the cloud deployment model to the associated use-case scenario. Options may be used only once or not at all.

Correct Answer:

Explanation

Comment: *

Name: *

Email: *

Verification: *

At a meeting, the systems administrator states the security controls a company wishes to implement seem excessive, since all of the information on the company's web servers can be obtained publicly and is not proprietary in any way. The next day the company's website is defaced as part of an SQL injection attack, and the company receives press inquiries about the message the attackers displayed on the website.
Which of the following is the FIRST action the company should take?

• A.Establish chain of custody for all systems to which the systems administrator has access.
• B.Conduct a detailed forensic analysis of the compromised system.
• C.Refer to and follow procedures from the company's incident response plan.
• D.Call a press conference to explain that the company has been hacked.
• E.Inform the communications and marketing department of the attack details.

Comment: *

Name: *

Email: *

Verification: *

A large international business has completed the acquisition of a small business and it is now in the process of integrating the small business' IT department.
Both parties have agreed that the large business will retain 95% of the smaller business' IT staff.
Additionally, the larger business has a strong interest in specific processes that the smaller business has in place to handle its regional interests.
Which of the following IT security related objectives should the small business' IT staff consider reviewing during the integration process? (Select TWO).

• A.The business continuity plan in place at the small business.
• B.New regulatory compliance requirements.
• C.How the large business operational procedures are implemented.
• D.The memorandum of understanding between the two businesses.
• E.Service level agreements between the small and the large business.
• F.The initial request for proposal drafted during the merger.

Comment: *

Name: *

Email: *

Verification: *