QUESTION: 129

An IS auditors reviewing the perimeter security design of a network. Which of the following provides the GREATEST assurance that both incoming and outgoing internet traffic is controlled?

Load batancer
Security information and event management (SIEM) system
Intrusion detection system (IDS)
Statetul firewall

Answer(s): D

Reveal Solution Next Question

An organization needs to comply with data privacy regulations forbidding the display of personally identifiable information (PII) on customer bills or receipts.
However, it is a business requirement to display at least one attribute so that customers can verify the bills or receipts are intended for them. What is the BEST recommendation?

Data sanitization
Data masking
Data encryption
Data tokenization

Answer(s): B

Reveal Solution Next Question

QUESTION: 131

Which of the following development practices would BEST mitigate the risk associated with theft of user credentials transmitted between mobile devices and the corporate network?

Enforce the validation of digital certificates used in the communication sessions.
Release mobile applications in debugging mode to allow for easy troubleshooting.
Embed cryptographic keys within the mobile application source code.
Allow persistent sessions behveen mobile applications and the corporate network.

Answer(s): A

Reveal Solution Next Question