Question 1

A security manager is performing a risk assessment on a data center. The security manager has determined that unauthorized personnel can enter the data center through the loading dock door and shut off utility power to the building. This finding is known as a:

Options :

A : Vulnerability

B : Threat

C : Risk

D : Probability

Answer: B

Question 2

The primary factor related to the selection of a control framework is:

Options :

A :

Current process maturity level

B : Size of the organization

C :

Industry vertical

D :

Compliance level

Answer: C

Question 3

An organization will be introducing smart TVs and other connected devices into the enterprise network. Which of the following security controls will most effectively protect the enterprise?

Options :

A : Data loss prevention

B : Network segmentation

C : Annual penetration testing

D : Adding smart devices to configuration management systems

Answer: B

Question 4

Which party should data subject contact FIRST if they believe their personal information has been collected and used without consent?

Options :

A : Privacy rights advocate

B : Outside privacy counsel

C : Data protection authorities

D : The organization-s chief privacy officer (CPO)

Answer: C

Question 5

An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What should be the FIRST step when developing an application link?

Options :

A : Data tagging

B : Data normalization

C : Data mapping

D : Data hashing

Answer: C