โ† All CDT Flashcard Decks

Security & Access Management Flashcards

7 cards from real CDT practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Security & Access Management flashcards as text
  1. What is the function of digital rights management (DRM) in document security?

    Answer: Controls how documents can be used, copied, or distributed after delivery

    DRM enforces usage policies on digital documents, preventing unauthorized copying, printing, forwarding, or editing even after the document reaches the recipient.

  2. In the context of document security, 'data at rest' refers to:

    Answer: Stored documents not actively being transmitted or processed

    Data at rest includes documents stored on servers, hard drives, or archives, which require encryption and access controls to prevent unauthorized access.

  3. Which secure document destruction method is most appropriate for classified paper records?

    Answer: Cross-cut shredding to DIN 66399 P-4 or higher

    Cross-cut shredding at security level P-4 or higher reduces documents to small particles, making reconstruction virtually impossible for classified material.

  4. What does 'chain of custody' mean for sensitive documents?

    Answer: A chronological record documenting who handled a document and when

    Chain of custody documents every transfer of possession of a sensitive document, ensuring accountability and supporting legal or audit requirements.

  5. A 'two-person integrity' rule in document handling requires:

    Answer: Two authorized individuals to be present when accessing or handling certain documents

    Two-person integrity prevents a single individual from unilaterally accessing or manipulating highly sensitive documents, reducing insider threat risk.

  6. Which document marking practice helps ensure that sensitive content is handled appropriately throughout its lifecycle?

    Answer: Applying classification labels such as CONFIDENTIAL or RESTRICTED

    Classification labels communicate the sensitivity level of a document to all handlers, guiding appropriate storage, transmission, and destruction procedures.

  7. What is a primary risk of using unencrypted email to transmit sensitive documents?

    Answer: Unauthorized parties can intercept and read the document in transit

    Unencrypted email transmits data in plaintext, making it vulnerable to interception through man-in-the-middle attacks or unauthorized server access.