CC exam V3

Which of the following is an example of an information asset registry?

• A list of all the suppliers and vendors used by an organization

• A database of all the financial transactions of an organization

• A list of all the employees in an organization and their roles

• A list of all the hardware and software assets in an organization

Which of the following is an important consideration when implementing system hardening measures?

• System hardening measures should be tested and evaluated to ensure that they are effective.

• Password policies should be relaxed to make it easier for users to access the system.

• System performance should always be prioritized over security.

• All security measures should be disabled when performing software updates.

How can security awareness training be integrated into everyday work activities?

• By hosting regular in-person seminars or workshops

• By requiring employees to complete a training course before accessing company resources

• By providing employees with security-related tasks to complete as part of their job responsibilities

• By providing ongoing reminders and updates about security best practices through email or messaging systems

Which of the following is an example of system hardening?

• Allowing all incoming traffic through a firewall.

• Disabling unnecessary services and ports on a server.

• Allowing users to connect to a network without a password.

• Enabling all user accounts with administrative privileges.

What is the difference between a log and an event?

• A log is a record of events, while an event is a specific occurrence

• A log is a record of security-related events, while an event is a record of all types of events

• A log and an event are the same thing

• A log is a specific occurrence, while an event is a record of events

What are some best practices for data retention?

• Deleting all data as soon as it is no longer needed, regardless of legal or business requirements.

• None

• Storing all data indefinitely, regardless of its importance or sensitivity.

• Regularly reviewing and updating data retention policies to ensure compliance with regulatory requirements.

What are some examples of storage devices where data remanence can occur?

• Hard disk drives

• USB flash drives

• Solid-state drives

• All options

Which of the following best describes the purpose of a data handling policy?

• To ensure that data is accessible to all employees.

• To delegate responsibility for data handling to a third-party provider.

• To establish guidelines for the proper handling of data.

• To prevent any access to data by employees.

What are some legal and regulatory requirements related to data destruction?

• All options

• Sarbanes-Oxley Act

• HIPAA

• GDPR

Which of the following best describes a digital signature?

• An electronic image of a handwritten signature

• A password used to access a digital account

• A mathematical scheme that verifies the authenticity and integrity of a digital message or document

• A code that encrypts a message