QUESTION: 173

Which of the following is the MOST significant key management problem due to the number of keys created?

Exponential growth when using symmetric keys
Exponential growth when using asymmetric keys
Storage of the keys require increased security
Keys are more difficult to provision and revoke

Answer(s): A

Systems Security Professional (CISSP) with identity and access management (IAM) responsibilities is asked by the Chief Information Security Officer (CISO) to perform a vulnerability assessment on a web application to pass a Payment Card Industry (PCI) audit. The CISSP has never performed this before. According to the (ISC)
Code of Professional Ethics, which of the following should the CISSP do?

Inform the CISO that they are unable to perform the task because they should render only those services for which they are fully competent and qualified
Since they are CISSP certified, they have enough knowledge to assist with the request, but will need assistance in order to complete it in a timely manner
Review the CISSP guidelines for performing a vulnerability assessment before proceeding to complete it
Review the PCI requirements before performing the vulnerability assessment

Answer(s): A

Reveal Solution Next Question

QUESTION: 175

While performing a security review for a new product, an information security professional discovers that the organization's product development team is proposing to collect government-issued identification (ID) numbers from customers to use as unique customer identifiers. Which of the following recommendations should be made to the product development team?

Customer identifiers should be a variant of the user's government-issued ID number.
Customer identifiers should be a cryptographic hash of the user's government-issued ID number.
Customer identifiers that do not resemble the user's government-issued ID number should be used.
Customer identifiers should be a variant of the user's name, for example, "jdoe" or "john.doe."

Answer(s): C

Reveal Solution Next Question

QUESTION: 176

The development team has been tasked with collecting data from biometric devices. The application will support a variety of collection data streams. During the testing phase, the team utilizes data from an old production database in a secure testing environment. What principle has the team taken into consideration?

Biometric data cannot be changed.
The biometric devices are unknown.
Biometric data must be protected from disclosure.
Separate biometric data streams require increased security.

Answer(s): C

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 44)

QUESTION: 173

QUESTION: 174

QUESTION: 175

QUESTION: 176