The objective of a vulnerability identification step in a risk assessment process is to.

• A.determine the impact of compromise
• B.identify the compensating controls
• C.determine the likelihood of a threat
• D.develop a list of weaknesses

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY objective of implementing privacy-related controls within an organization?

• A.To prevent confidential data loss
• B.To comply with legal and regulatory requirements
• C.To identify data at rest and data in transit for encryption
• D.To provide options to individuals regarding use of their data

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the PRIMARY basis for procedures to dispose of data securely?

• A.Classification of data
• B.Environmental regulations
• C.Data retention policy
• D.Type of media used for data storage

Comment: *

Name: *

Email: *

Verification: *

An IS auditor determines that an online retailer processing credit card information does not have a data classification process. The auditor's NEXT step should be to:

• A.recommend encryption of all sensitive data at rest
• B.determine existing controls around sensitive data
• C.recommend the implementation of data loss prevention (DLP) tools
• D.inquire if there have been any data loss incidents

Comment: *

Name: *

Email: *

Verification: *

The feature of a digital signature that ensures the sender cannot later deny generating and sending the message is called:

• A.data integrity.
• B.authentication.
• C.non repudiation.
• D.replay protection.

Comment: *

Name: *

Email: *

Verification: *