Question 1

Which of the following is an objective of public key infrastructure (PKI)?

Options :

A : Creating the private-public key pair for secure communications

B : Independently authenticating the validity of the sender-s public key

C : Securely distributing secret keys to the communicating parties

D : Approving the algorithm to be used during data transmission

Answer: B

Question 2

When reviewing user management roles, which of the following groups presents the GREATEST risk based on their permissions?

Options :

A : Privileged users

B : Database administrators

C : Terminated employees

D : Contractors

Answer: A

Question 3

Which of the following is an important reason for tracing the access and origin of an intrusion once it has been detected?

Options :

A : To create appropriate security awareness content to avoid recurrence

B : To determine the impact of the intrusion event

C : To perform a root cause analysis of the intrusion event

D : To determine and correct any system weaknesses

Answer: C

Question 4

Which of the following is an example of an application security control?

Options :

A : Secure coding

B : User security awareness training

C : Security operations center

D : Intrusion detection

Answer: A

Question 5

Which of the following is used to help identify the most appropriate controls to meet an organization's specific security requirements?

Options :

A : Risk assessment

B : Maturity model

C : Contingency planning

D : Security assessment

Answer: A