CCP CCP Endpoint Security & Data Protection 2

Question 1

What is the primary goal of data classification within an organization?

Accepted Answer

To assign protection levels to data based on its sensitivity

Answer

Data classification assigns sensitivity labels so that appropriate security controls can be applied to protect data according to its value and risk.

Question 2

Which technique replaces sensitive data with a non-sensitive token that has no exploitable value?

Accepted Answer

Tokenization

Answer

Tokenization substitutes sensitive values such as credit card numbers with tokens that are meaningless outside the tokenization system.

Question 3

What is the purpose of application whitelisting on endpoints?

Accepted Answer

To allow only explicitly pre-approved applications to execute

Answer

Application whitelisting permits only authorized applications to run, blocking all unauthorized executables including malware by default.

Question 4

Which standard mandates security controls for systems that process, store, or transmit payment card data?

Accepted Answer

PCI DSS

Answer

PCI DSS (Payment Card Industry Data Security Standard) requires organizations that handle payment card data to implement specific security controls.

Question 5

What is the primary function of a Mobile Device Management (MDM) solution?

Accepted Answer

To centrally manage and enforce security policies on mobile devices

Answer

MDM solutions allow IT administrators to remotely manage configurations, enforce policies, and wipe or lock mobile devices as needed.

(CCP) Certified Cybersecurity Professional Practice Test