CySA Module 12 - Data Protection and Privacy

A network engineer is designing a new subnet to be deployed in the neighboring building that her organization just purchased. She wants to ensure that certain protocols are not allowed to communicate between the existing subnets and the new subnet. Which of the following should the network engineer configure on the router connecting the two buildings?

• DAC

• ACL

• MAC

• SID

Which of the following would be the result of a user with the IP address of 10.15.30.45 attempting to access a website located at 10.20.30.40 if a router or firewall is located between the two subnets using the extended ACL below? 10 PERMIT IP ANY ANY 20 PERMIT TCP 10.15.30.0 0.0.0.255 10.20.30.0 0.0.0.255 eq 25 20 PERMIT TCP 10.15.30.0 0.0.0.255 10.20.30.0 0.0.0.255 eq 143 30 DENY IP 10.15.30.0 0.0.0.255 10.20.30.0 0.0.0.255 eq 80 40 DENY IP 10.15.30.0 0.0.0.255 10.20.30.0 0.0.0.255 eq 443

• Access is permitted

• Access is denied

The user would be able to access email, but not the website.

• The user would be able to access email, but not the website.

• The user would be able to access the website successfully.

• The user would be able to access the HTTP version of the website, but not HTTPS.

• The user would be able to access the HTTPS version of the website, but not HTTP.

A consultant is hired to analyze some of the most critical and confidential systems in an organization. Which of the following most likely will be necessary as part of the work?

• SLA

• NDA

• OLA

• HIPAA

Justin has just received a report from a security consultant with a line item stating that it is possible that employees potentially could send customer credit card numbers and social security numbers to their personal e-mail addresses and use them to engage in identity theft. Which of the following should Justin consider as a solution to this serious security issue?

• IDS

• DLP

• IPS

• NAT

Faruq is an administrator for a large movie production studio. He has just been sent the mastered version of the latest release, which needs to be available on the company's online rental platform in the near future. Which of the following should he ensure is embedded in the file so that only authorized customers are allowed to watch the movie?

• DPO

• DRP

• Data masking

• DRM

Stan has been tasked with ensuring that his company's data remains secure. As such, he wants to be able to prevent tablets and other devices from accessing certain systems unless the devices are physically on the company's multi-building HQ campus. Which of the following might he decide to implement as a solution?

• Geoproximity routing

• Geolanding

• Geofencing

• Geocaching

Brooklyn has just been hired at a small company where the data owners determine and set the permissions on files and objects for which they are the data owner. Which of the following describes the type of access control that is being used?

• DAC

• RBAC

• MAC

• ABAC

Asan has just returned from a cybersecurity conference where he learned about a triad of principles that commonly are applied to technologies and methodologies within the IT sector. One of the components of this principle was described as ensuring that secret data remained secret. Which of the following describes the component that he learned about?

• Privacy

• Classified

• Secrecy

• Confidentiality

Aaron has been tasked with embedding unique information within albums that are going to be distributed by the record label that he works for before they are protected by DRM. Which of the following describes what he has been asked to do?

• Cavitation

• Data labeling

• Invisible inking

• Watermarking