QUESTION: 149

An organization requires a contractual document that includes:
-An overview of what is covered
-Goals and objectives
-Performance metrics for each party
-A review of how the agreement is managed by all parties
Which of the following BEST describes this type of contractual document?

Answer(s): A

Reveal Solution Next Question

QUESTION: 150

A company based in the United States holds insurance details of EU citizens.
Which of the following must be adhered to when processing EU citizens' personal, private, and confidential data?

The principle of lawful, fair, and transparent processing
The right to be forgotten principle of personal data erasure requests
The non-repudiation and deniability principle
The principle of encryption, obfuscation, and data masking

Answer(s): A

Reveal Solution Next Question

QUESTION: 151

A security analyst is evaluating the security of an online customer banking system. The analyst has a 12-character password for the test account. At the login screen, the analyst is asked to enter the third, eighth, and eleventh characters of the password.
Which of the following describes why this request is a security concern? (Choose two.)

The request is evidence that the password is more open to being captured via a keylogger.
The request proves that salt has not been added to the password hash, thus making it vulnerable to rainbow tables.
The request proves the password is encoded rather than encrypted and thus less secure as it can be easily reversed.
The request proves a potential attacker only needs to be able to guess or brute force three characters rather than 12 characters of the password.
The request proves the password is stored in a reversible format, making it readable by anyone at the bank who is given access.
The request proves the password must be in cleartext during transit, making it open to on-path attacks.

Answer(s): D,E

Reveal Solution Next Question

QUESTION: 152

A company launched a new service and created a landing page within its website network for users to access the service. Per company policy, all websites must utilize encryption for any authentication pages. A junior network administrator proceeded to use an outdated procedure to order new certificates. Afterward, customers are reporting the following error when accessing a new web page: NET:ERR_CERT_COMMON_NAME_INVALID. Which of the following BEST describes what the administrator should do NEXT?

Request a new certificate with the correct subject alternative name that includes the new websites.
Request a new certificate with the correct organizational unit for the company's website.
Request a new certificate with a stronger encryption strength and the latest cipher suite.
Request a new certificate with the same information but including the old certificate on the CRL.

Answer(s): A

Reference:

https://knowledge.digicert.com/solution/SO9440.html

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 38)

QUESTION: 149

QUESTION: 150

QUESTION: 151

QUESTION: 152

Reference: