CISSP Domain 2 (Asset Security)

Brenda is an information security architect at a financial institution. She wants to ensure that the transactions are secure as they traverse the network. She recommends the use of TLS. What threat is she attempting to stop and what method is she using to prevent it?

• Man in the middle, VPN

• Packet injection, Encryption

• Sniffing, encryption

• Sniffing, TEMPEST

Doreen’s company is operating a hybrid cloud environment. There are on prem (on site) and cloud based systems. She is doing monitoring on prem (on site). As the number of cloud users are growing, she needs to apply security policies. What type of tool is best suited for this purpose?

• A NGFW

• A CASB

• An IDS

• A SOAR

When media is labelled based on the classification of the data it contains, what rule is typically applied regarding labels?

• The data is labelled based on its integrity requirements

• The media is labelled based on the highest classification level of the data it contains

• The label is labelled with all levels of classification of the data it contains

• The media is labelled with the lowest level of classification of the data it contains

Which one of the following administrative processes assists organizations in assigning appropriate levels of security control to sensitive information?

• Data classification

• Remanence

• Transmitting data

• Clearing

How can a data retention policy helps to reduce liability?

• By ensuring that unneeded data isn’t retained

• By ensuring that incriminating data is destroyed

• By ensuring that data is securely wiped so it cannot be restored for legal discovery

• By reducing the cost of data storage required by law

Staff in an IT department who are delegated responsibility for day to day tasks hold what data role?

• Business owner

• User

• Data processor

• Custodian

Neal is tasked with identifying security controls for systems covered by his organization’s information classification system. Why might Neal choose to use a security baseline?

• It applies in all circumstances, allowing consistent security controls

• They are approved by industry standard bodies, preventing liability

• They provide a good starting point that can be tailored to organizational needs

• They ensure that systems are always in secure state

Joey wants to prepare media for re-use in an environment operating at the same level of sensitivity. Which of the following is best suited for her needs?

• Clearing

• Erasing

• Purging

• Sanitization

What issue is common to spare sectors and bad sectors on hard drives as well as over provisioned space on modern SSDs?

• They can be used to hide data

• They can only be degaussed

• They are not addressable, resulting in data remanence

• They may not be cleared resulting in data remanence

What term best describes data that is resident in system memory?

• Data at rest

• Buffered data

• Data in use

• Data in motion