CSM Regulatory Compliance & Standards 5

Question 1

Which Common Criteria element describes the level of confidence in a product's security evaluation?

Accepted Answer

Evaluation Assurance Level

Answer

Evaluation Assurance Levels (EAL1–EAL7) indicate the depth and rigor of assurance for evaluated products.

Question 2

Which standard validates cryptographic modules for U.S. federal use?

Accepted Answer

FIPS 140

Answer

FIPS 140 specifies security requirements for cryptographic modules validated through CMVP.

Question 3

In the NIST Risk Management Framework, what step follows selecting controls?

Accepted Answer

Implement controls

Answer

RMF steps: Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor.

Question 4

A U.S. company has EU customers but no EU office. When does GDPR still apply to it?

Accepted Answer

When it offers goods or services to or monitors individuals in the EU

Answer

GDPR has extraterritorial scope when targeting or monitoring individuals in the EU.

Question 5

Which best describes the purpose of the CIS Critical Security Controls?

Accepted Answer

Prioritized actions to defend against common attacks

Answer

CIS Controls provide prioritized, actionable safeguards against common cyberattacks.

CSM - Certified Security Manager Practice Test