Sec+3

A company is developing a new video conferencing tool. They want to make sure that all video and audio data transmitted between participants are encrypted and protected from eavesdropping. Which type of encryption should the developers implement to achieve this?

• Endpoint Encryption

• Transport-layer encryption

• Volume level encryption

• Database-level EncryptionAccess Control

After a significant cybersecurity incident, ABC Tech revamped its incident response procedures. However, the documentation was not updated to reflect these changes. During a subsequent minor incident, there was confusion regarding the steps to be followed. Which of the following is the MOST direct implication of not updating the incident response documentation?

• The company may have to invest in new cybersecurity tools

• Stakeholders might lose trust in the company’s ability to handle incidents

• Incident response might be inconsistent and less effective

• ABC Tech may have to hire external consultants for incident response

A financial organization is considering implementing a system that allows all users to view all transactions, but once a transaction is recorded, it cannot be altered or deleted. They want this transparency to foster trust among their users. Which of the following would best meet this requirement?

• Digital Certificate

• Open public ledger

• Symmetric Encryption

• Secure file transfer protocol

A company is implementing a system to ensure that code released to production is both unaltered and approved by a specific team member. Which of the following cryptographic techniques should they implement?

• Symmetric encryption of the code

• Hashing the code with SHA-256

• Encrypting the code with the team member's public key

• Digital signature by team member

Your company has recently deployed an update to its CRM application. Post-update, users are experiencing connectivity issues. As a security administrator, which of the following steps should you take FIRST to address the connectivity problem without causing data loss?

• Restart the application immediately

• Disconnect all users and then restart the application

• Validate the update's integrity and then restart the application

• Reinstall the previous version of the CRM application

TechDynamics, a growing tech startup, plans to scale its operations and serve a global clientele. Given that their client base operates in multiple time zones, when should TechDynamics schedule their system maintenance to ensure minimal disruption?

• During the busiest hours for their headquarters' local time

• Staggered based on the peak hours of their global clients

• Only when a system breakdown occurs

• Establish a consistent maintenance window during off-peak hours for the majority of their clientele

During an IT audit, a company’s encryption practices come under scrutiny. The IT auditor recommends increasing the encryption key length for certain applications to improve security. What is the PRIMARY reason to increase the encryption key length?

• To speed up encryption and decryption processes

• To ensure compatibility with older systems

• To reduce the possibility of a brute force attack

• To reduce the key management overhead

Sarah is working on a project where she needs to validate the integrity and authenticity of assets over time, without a centralized authority. Which technology would be most appropriate for this use case?

• Digital Signature

• Key escrow

• Blockchain

• Key management system

A graphic design company frequently works with large files such as videos and high-resolution images. These files are stored on a dedicated storage volume in their server. While they need to secure this data, they don’t want to encrypt individual files due to the volume of data and frequent access needs. Which encryption approach is most appropriate for this scenario?

• File-level encryption

• Full-disk encryption

• Transport-layer Encryption

• Volume-level encryption

An e-commerce company stores millions of customer transaction records in their primary database. They have decided to enhance their security posture by applying encryption to protect sensitive data. However, they don’t want to encrypt the entire server storage, just the data within the database. Which encryption approach should the company adopt to meet their objective?

• Full-disk encryption

• File-level encryption

• Volume-level Encryption

• Database-level Encryption