QUESTION: 241

A company wants to use a process to embed a sign of ownership covertly inside a proprietary document without adding any identifying attributes.
Which of the following would be BEST to use as part of the process to support copyright protections of the document?

Steganography
E-signature
Watermarking
Cryptography

Answer(s): A

Reveal Solution Next Question

QUESTION: 242

An organization is assessing the security posture of a new SaaS CRM system that handles sensitive PII and identity information, such as passport numbers. The SaaS CRM system does not meet the organization's current security standards. Post remediation work, the assessment recorded the following:
1. There will be a $20.000 per day revenue loss for each day the system is delayed going into production.
2. The inherent risk was high.
3. The residual risk is now low.
4. The solution rollout to the contact center will be a staged deployment.
Which of the following risk-handling techniques will BEST meet the organization’s requirements post remediation?

Apply for a security exemption, as the risk is too high to accept.
Transfer the risk to the SaaS CRM vendor, as the organization is using a cloud service.
Accept the risk, as compensating controls have been implemented to manage the risk.
Avoid the risk by accepting the shared responsibility model with the SaaS CRM provider.

Answer(s): C

Reveal Solution Next Question

QUESTION: 243

A security analyst is using data provided from a recent penetration test to calculate CVSS scores to prioritize remediation.
Which of the following metric groups would the analyst need to determine to get the overall scores? (Choose three.)

Temporal
Availability
Integrity
Confidentiality
Base
Environmental
Impact
Attack vector

Answer(s): A,E,F

Reveal Solution Next Question

QUESTION: 244

During a recent security incident investigation, a security analyst mistakenly turned off the infected machine prior to consulting with a forensic analyst. Upon rebooting the machine, a malicious script that was running as a background process was no longer present. As a result, potentially useful evidence was lost.
Which of the following should the security analyst have followed?

Order of volatility
Chain of custody
Verification
Secure storage

Answer(s): A

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 61)

QUESTION: 241

QUESTION: 242

QUESTION: 243

QUESTION: 244