CISSP Asset Security 2

Question 1

Which data state requires encryption to protect information being processed by a CPU?

Accepted Answer

Data in use

Answer

Data in use refers to information actively being processed in memory or CPU registers, which is the most difficult state to protect and requires techniques like secure enclaves.

Question 2

A company wants to ensure that data is permanently unrecoverable from decommissioned HDDs containing PII. Which method is MOST appropriate?

Accepted Answer

Degaussing or physical destruction

Answer

Degaussing destroys the magnetic properties of the drive making data unrecoverable, and physical destruction ensures no data can be retrieved from decommissioned media.

Question 3

Under which data classification level would government information whose unauthorized disclosure could cause serious damage to national security be placed?

Accepted Answer

Secret

Answer

The Secret classification applies to information whose unauthorized disclosure could cause serious damage to national security, while Top Secret applies when damage would be exceptionally grave.

Question 4

What is the PRIMARY purpose of a data retention policy?

Accepted Answer

To define how long data must be kept and when it must be destroyed

Answer

A data retention policy establishes the required storage duration for different data types and mandates secure destruction once that period expires, balancing legal requirements and risk.

Question 5

Which concept ensures that a user is given only the minimum access rights necessary to perform their job function?

Accepted Answer

Least privilege

Answer

Least privilege limits user rights and permissions to only what is required for their specific role, reducing the attack surface and limiting damage from compromised accounts.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Asset Security 2