CYBERSECURITY MANAGEMENT I -
STRATEGIC - C727 PREASSESSMENT
TEST QUESTIONS AND ANSWERS WITH
SOLUTIONS 2024
Which security principle uses countermeasures such as encryption and data classification? - ANSWER
Confidentiality
A company is concerned about unauthorized alteration of data in a customer database.
Which security principle is implicated? - ANSWER Integrity
Which integrity measure should be applied to enforce nonrepudiation of emails sent from internal
users? - ANSWER Use digital signatures on emails
A company is headquartered in a region that has frequent internet connectivity issues due to inclement
weather. The company's primary reporting servers are located in this office and are critical to the sales
team in the field for accurate product pricing. Employees require 24/7 access to the most up-to-date
information, as the data frequently changes.
Which solution will ensure a higher availability of these servers outside this company? - ANSWER
Implement a secondary internet connectivity solution at headquarters, which fails over when the
primary connection is unavailable
Research department members encrypt their Office 365 files by using keys residing in an on-premises
key store. Due to a failure of on-premises network connectivity, the files cannot be decrypted.
What should be done to maintain the availability of these files without compromising their
confidentiality and integrity? - ANSWER Set up redundant internet connectivity
The management team of an organization creates a document stating employees who access the
company's enterprise resource planning (ERP) system must use a certain browser and are required to
have antivirus installed on their machines.
, Which type of document is this? - ANSWER Standard
Which type of security documentation offers recommendations and suggestions on creating a strong
password? - ANSWER Guidelines
On an employee's first day of work, she notices a large number of file shares available, most of which do
not pertain to her position. The employee went to her manager about the level of access.
The employee's manager said she has the same level of access as her predecessor.Which principle does
this level of access violate? - ANSWER Least privilege
A company wants to enforce strict penalties on a former employee who uploaded sensitive company
technical schematics onto a personal website.
Which type of document will this company use to enforce penalties? - ANSWER Nondisclosure
agreement
Which security concept includes the process of reviewing the activities of an identity? - ANSWER
Accountability
Which security concept includes comparing a user's fingerprint against authorized fingerprints stored in
a database? - ANSWER Authentication
An information security manager has been asked to develop security policies and to deploy security
solutions for an organization.
Which security principles must be considered in addition to CIA triad principles? - ANSWER AAA
A company plans to implement a new authentication system for customers accessing the company
website. When customers log on, the website indicates that it sent a text message that includes a code
to the customer's mobile phone. To complete the log-on process, the customer is required to enter the
appropriate code within five minutes.
STRATEGIC - C727 PREASSESSMENT
TEST QUESTIONS AND ANSWERS WITH
SOLUTIONS 2024
Which security principle uses countermeasures such as encryption and data classification? - ANSWER
Confidentiality
A company is concerned about unauthorized alteration of data in a customer database.
Which security principle is implicated? - ANSWER Integrity
Which integrity measure should be applied to enforce nonrepudiation of emails sent from internal
users? - ANSWER Use digital signatures on emails
A company is headquartered in a region that has frequent internet connectivity issues due to inclement
weather. The company's primary reporting servers are located in this office and are critical to the sales
team in the field for accurate product pricing. Employees require 24/7 access to the most up-to-date
information, as the data frequently changes.
Which solution will ensure a higher availability of these servers outside this company? - ANSWER
Implement a secondary internet connectivity solution at headquarters, which fails over when the
primary connection is unavailable
Research department members encrypt their Office 365 files by using keys residing in an on-premises
key store. Due to a failure of on-premises network connectivity, the files cannot be decrypted.
What should be done to maintain the availability of these files without compromising their
confidentiality and integrity? - ANSWER Set up redundant internet connectivity
The management team of an organization creates a document stating employees who access the
company's enterprise resource planning (ERP) system must use a certain browser and are required to
have antivirus installed on their machines.
, Which type of document is this? - ANSWER Standard
Which type of security documentation offers recommendations and suggestions on creating a strong
password? - ANSWER Guidelines
On an employee's first day of work, she notices a large number of file shares available, most of which do
not pertain to her position. The employee went to her manager about the level of access.
The employee's manager said she has the same level of access as her predecessor.Which principle does
this level of access violate? - ANSWER Least privilege
A company wants to enforce strict penalties on a former employee who uploaded sensitive company
technical schematics onto a personal website.
Which type of document will this company use to enforce penalties? - ANSWER Nondisclosure
agreement
Which security concept includes the process of reviewing the activities of an identity? - ANSWER
Accountability
Which security concept includes comparing a user's fingerprint against authorized fingerprints stored in
a database? - ANSWER Authentication
An information security manager has been asked to develop security policies and to deploy security
solutions for an organization.
Which security principles must be considered in addition to CIA triad principles? - ANSWER AAA
A company plans to implement a new authentication system for customers accessing the company
website. When customers log on, the website indicates that it sent a text message that includes a code
to the customer's mobile phone. To complete the log-on process, the customer is required to enter the
appropriate code within five minutes.
