Which of the following terms refers to the delivery of encryption keys to a CASB or a third-party entity?

• A.Key recovery
• B.Key sharing
• C.Key escrow
• D.Key distribution

Comment: *

Name: *

Email: *

Verification: *

A security auditor needs to review the manner in which an entertainment device operates. The auditor is analyzing the output of a port scanning tool to determine the next steps in the security review. Given the following log output.
The best option for the auditor to use NEXT is:

• A.Reverse engineering
• B.A SCAP assessment.
• C.Fuzzing
• D.Network interception.

Comment: *

Name: *

Email: *

Verification: *

An organization recently recovered from an attack that featured an adversary injecting Malicious logic into OS bootloaders on endpoint devices Therefore, the organization decided to require the use of TPM for measured boot and attestation, monitoring each component from the IJEFI through the full loading of OS components. of the following TPM structures enables this storage functionality?

• A.Endorsement tickets
• B.Clock/counter structures
• C.Command tag structures with MAC schemes
• D.Platform configuration registers

Comment: *

Name: *

Email: *

Verification: *

A company requires a task to be carried by more than one person concurrently. This is an example of:

• A.dual control
• B.least privilege
• C.separation of d duties.
• D.job rotation

Comment: *

Name: *

Email: *

Verification: *

An organization is referencing NIST best practices for BCP creation while reviewing current internal organizational processes for mission-essential items.
Which of the following phases establishes the identification and prioritization of critical systems and functions?

• A.Develop an exposure factor matrix.
• B.Review a recent gap analysis.
• C.Conduct a business impact analysis.
• D.Perform a cost-benefit analysis.

Comment: *

Name: *

Email: *

Verification: *