Which of the following is the PRIMARY benefit of implementing policies and procedures for system hardening?

1. A. It increases system resiliency.
2. B. It reduces external threats to data.
3. C. It reduces exposure of data.
4. D. It eliminates attack motivation for data.

Correct Answer: B

How can an organization BEST ensure its vendors are complying with data privacy requirements defined in their contracts?

1. A. Review self-attestations of compliance provided by vendor management.
2. B. Obtain independent assessments of the vendors’ data management processes.
3. C. Perform penetration tests of the vendors’ data security.
4. D. Compare contract requirements against vendor deliverables.

Correct Answer: D

An organization wants to ensure that endpoints are protected in line with the privacy policy. Which of the following should be the FIRST consideration?

1. A. Detecting malicious access through endpoints
2. B. Implementing network traffic filtering on endpoint devices
3. C. Managing remote access and control
4. D. Hardening the operating systems of endpoint devices

Correct Answer: B

Which of the following hard drive sanitation methods provides an organization with the GREATEST level of assurance that data has been permanently erased?

1. A. Degaussing the drive
2. B. Factory resetting the drive
3. C. Crypto-shredding the drive
4. D. Reformatting the drive

Correct Answer: A

Which of the following should be of GREATEST concern when an organization wants to store personal data in the cloud?

1. A. The organization’s potential legal liabilities related to the data
2. B. The data recovery capabilities of the storage provider
3. C. The data security policies and practices of the storage provider
4. D. Any vulnerabilities identified in the cloud system

Correct Answer: C