practice sheet · all objectives switch to smart practice →
Certified Information Systems Security Professional
A security manager is documenting the difference between two related governance concepts. Which pairing is included as an explicit sub-topic under the 'Evaluate and apply security governance principles' objective?
Explanation
Due care/due diligence
Threat and vulnerability identification
Data collection Data location Data maintenance Data retention Data remanence Data destruction
Scoping and tailoring Standards selection
An organization is assessing risks tied to acquiring hardware components from overseas suppliers, including the possibility of counterfeits and malicious implants. Under which objective does this concern fall, and which mitigation is specifically listed for it?
Explanation
Risk response and treatment (e.g., cybersecurity insurance)
product tampering, counterfeits, implants) Risk mitigations (e.g., third-party assessment and monitoring, minimum security requirements, service level requirements, silicon root of trust
Data protection methods (e.g., Digital Rights Management (DRM), Data Loss Prevention (DLP)
Locked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to review