QUESTION: 57

A company is acquiring incident response and forensic assistance from a managed security service provider in the event of a data breach. The company has selected a partner and must now provide required documents to be reviewed and evaluated. Which of the following documents would BEST protect the company and ensure timely assistance? (Choose two.)

Answer(s): C,F

Reveal Solution Next Question

QUESTION: 58

A security architect is implementing security measures in response to an external audit that found vulnerabilities in the corporate collaboration tool suite. The report identified the lack of any mechanism to provide confidentiality for electronic correspondence between users and between users and group mailboxes. Which of the following controls would BEST mitigate the identified vulnerability?

Issue digital certificates to all users, including owners of group mailboxes, and require S/MIME with AES- 256.
Federate with an existing PKI provider, and reject all non-signed emails
Implement two-factor email authentication, and require users to hash all email messages upon receipt
Provide digital certificates to all systems, and eliminate the user group or shared mailboxes

Answer(s): A

Reveal Solution Next Question

QUESTION: 59

Which of the following BEST represents a risk associated with merging two enterprises during an acquisition?

The consolidation of two different IT enterprises increases the likelihood of the data loss because there are now two backup systems
Integrating two different IT systems might result in a successful data breach if threat intelligence is not shared between the two enterprises
Merging two enterprise networks could result in an expanded attack surface and could cause outages if trust and permission issues are not handled carefully
Expanding the set of data owners requires an in-depth review of all data classification decisions, impacting availability during the review

Answer(s): C

Reveal Solution Next Question

QUESTION: 60

Two competing companies experienced similar attacks on their networks from various threat actors. To improve response times, the companies wish to share some threat intelligence about the sources and methods of attack. Which of the following business documents would be BEST to document this engagement?

Business partnership agreement
Memorandum of understanding
Service-level agreement
Interconnection security agreement

Answer(s): D

Reference:

https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-47.pdf

Reveal Solution Next Question

Free CAS-003 Exam Braindumps (page: 15)

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60

Reference: