QUESTION: 5

The threat modeling identifies a man-in-the-middle(MITM)exposure. Which countermeasure should the information system security officer (ISSO) select to mitigate the risk of a protected Health information (PHI) data leak?

Auditing
Anonymization
Privacy monitoring
Data retention

Answer(s): B

Reveal Solution Next Question

QUESTION: 6

Which of the following is considered the last line defense in regard to a Governance, Risk managements, and compliance (GRC) program?

Internal audit
Internal controls
Board review
Risk management

Answer(s): B

Reveal Solution Next Question

QUESTION: 7

Which of the following is the BEST example of weak management commitment to the protection of security assets and resources?

poor governance over security processes and procedures
immature security controls and procedures
variances against regulatory requirements
unanticipated increases in security incidents and threats

Answer(s): A

Reveal Solution Next Question

QUESTION: 8

Which of the following is the BEST reason for the use of security metrics?

They ensure that the organization meets its security objectives.
They provide an appropriate framework for Information Technology (IT) governance.
They speed up the process of quantitative risk assessment.
They quantify the effectiveness of security processes.

Answer(s): B

Reveal Solution Next Question

Free HCISPP Exam Braindumps (page: 3)

QUESTION: 5

QUESTION: 6

QUESTION: 7

QUESTION: 8

HCISPP Discussions & Posts