712-50 practice questions 131–140

1. Question 131 · 188 in bank

   An organization recently acquired a Data Loss Prevention (DLP) solution, and two months after the implementation, it was found that sensitive data was posted to numerous Dark Web sites. The DLP application was checked, and there are no apparent malfunctions and no errors. What is the MOST likely reason why the sensitive data was posted?

   • AThe DLP Solution was not integrated with mobile device anti-malware
   • BData classification was not properly performed on the assets
   • CThe sensitive data was not encrypted while at rest
   • DA risk assessment was not performed after purchasing the DLP solution

   Show answer

   Answer: B

   Explanation

   The MOST likely reason why the sensitive data was posted to Dark Web sites in this scenario is option B: Data classification was not properly performed on the assets. Data classification is a crucial step in implementing a Data Loss Prevention (DLP) solution. It involves identifying and categorizing the organization's data based on its sensitivity and importance. By properly classifying data, organizations can apply appropriate security controls and policies to protect sensitive information from unauthorized disclosure or leakage.

   Source: Adapted from community discussion — arifbhatkar

   Next question

2. Question 132 · 188 in bank

   What is a Statement of Objectives (SOA)?

   • AA section of a contract that defines tasks to be performed under said contract
   • BAn outline of what the military will do during war
   • CA document that outlines specific desired outcomes as part of a request for proposal
   • DBusiness guidance provided by the CEO

   Show answer

   Answer: C

   Next question

3. Question 133 · 188 in bank

   During a cyber incident, which non-security personnel might be needed to assist the security team?

   • AThreat analyst, IT auditor, forensic analyst
   • BNetwork engineer, help desk technician, system administrator
   • CCIO, CFO, CSO
   • DFinancial analyst, payroll clerk, HR manager

   Show answer

   Answer: B

   Next question

4. Question 134 · 188 in bank

   You are the CISO for an investment banking firm. The firm is using artificial intelligence (AI) to assist in approving clients for loans. Which control is MOST important to protect AI products?

   • AHash datasets
   • BSanitize datasets
   • CDelete datasets
   • DEncrypt datasets

   Show answer

   Answer: B

   Explanation

   B. Sanitize datasets The most important control to protect AI products is to sanitize datasets. Sanitizing datasets involves removing or de-identifying sensitive and personally identifiable information (PII) from the datasets used to train and test the AI models. By removing or anonymizing PII, the risk of exposing sensitive information through the AI system is mitigated.

   Source: Adapted from community discussion — arifbhatkar

   Next question

5. Question 135 · 188 in bank

   Which level of data destruction applies logical techniques to sanitize data in all user-addressable storage locations?

   • APurge
   • BClear
   • CMangle
   • DDestroy

   Show answer

   Answer: B

   Explanation

   Reference: https://it.brown.edu/computing-policies/electronic-equipment-disposition-policy/data-removal-recommendations

   Source: Adapted from community discussion — arifbhatkar

   Next question

6. Question 136 · 188 in bank

   A university recently hired a CISO. One of the first tasks is to develop a continuity of operations plan (COOP). In developing the business impact assessment (BIA), which of the following MOST closely relate to the data backup and restoral?

   • ARecovery Point Objective (RPO)
   • BMean Time to Delivery (MTD)
   • CRecovery Time Objective (RTO)
   • DMaximum Tolerable Downtime (MTD)

   Show answer

   Answer: A

   Explanation

   A. Recovery Point Objective (RPO) In developing the business impact assessment (BIA), the factor that most closely relates to data backup and restoration is the Recovery Point Objective (RPO). RPO refers to the maximum acceptable amount of data loss that an organization can tolerate in the event of a disruption or disaster. It defines the point in time to which data must be restored in order to resume operations with an acceptable level of data loss

   Source: Adapted from community discussion — arifbhatkar

   Next question

7. Question 137 · 188 in bank

   A key cybersecurity feature of a Personal Identification Verification (PIV) Card is:

   • AInability to export the private certificate/key
   • BIt can double as physical identification at the DMV
   • CIt has the user's photograph to help ID them
   • DIt can be used as a secure flash drive

   Show answer

   Answer: A

   Next question

8. Question 138 · 188 in bank

   To make sure that the actions of all employees, applications, and systems follow the organization's rules and regulations can BEST be described as which of the following?

   • ACompliance management
   • BAsset management
   • CRisk management
   • DSecurity management

   Show answer

   Answer: A

   Next question

9. Question 139 · 188 in bank

   You have been hired as the Information System Security Officer (ISSO) for a US federal government agency. Your role is to ensure the security posture of the system is maintained. One of your tasks is to develop and maintain the system security plan (SSP) and supporting documentation. Which of the following is NOT documented in the SSP?

   • AThe controls in place to secure the system
   • BName of the connected system
   • CThe results of a third-party audits and recommendations
   • DType of information used in the system

   Show answer

   Answer: B

   Explanation

   Reference: https://www.govinfo.gov/content/pkg/GOVPUB-C13-63e84ab7af43b36228f10e4f0b5f8c38/pdf/GOVPUB-C13- 63e84ab7af43b36228f10e4f0b5f8c38.pdf (65)

   References

   • nist.gov documentation

   Next question

10. Question 140 · 188 in bank

    Who should be involved in the development of an internal campaign to address email phishing?

    • ABusiness unit leaders, CIO, CEO
    • BBusiness Unite Leaders, CISO, CIO and CEO
    • CAll employees
    • DCFO, CEO, CIO

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

712-50 practice, question 131. 188 questions available.