CISSP Crash Course - Security Controls and Compliance Requirements

What is the purpose of the NIST special publication 853 B?

• To define the impact levels of data breaches

• To list security controls for different baselines

• To establish rules for data sharing

• To provide guidelines for data encryption

Which baseline is applied when a system's compromise has a low impact on the organization?

• Moderate impact baseline

• High impact baseline

• Privacy control baseline

• Low impact baseline

What does tailoring involve in the context of security controls?

• Ignoring external standards

• Applying all controls universally

• Removing unnecessary controls

• Modifying controls to fit organizational needs

How does scoping help in applying security controls?

• By selecting controls that apply to all systems

• By enforcing the strictest controls available

• By choosing controls specific to a system's needs

• By eliminating all controls

What is the main goal of Digital Rights Management (DRM)?

• To prevent unauthorized use and distribution

• To enhance data encryption

• To simplify data access

• To increase data storage capacity

What is the role of a Cloud Access Security Broker (CASB)?

• To manage cloud service costs

• To provide cloud storage solutions

• To monitor and enforce security policies for cloud services

• To encrypt all cloud data

How does pseudonymization protect data?

• By storing data in secure locations

• By replacing data with pseudonyms

• By deleting sensitive data

• By encrypting data