CSX CSX Cryptography and Data Protection 2

Question 1

What is the purpose of key escrow in an enterprise data protection program?

Accepted Answer

To store copies of encryption keys with a trusted third party for recovery

Answer

Key escrow involves depositing encryption keys with a trusted authority to enable data recovery if keys are lost or personnel leave.

Question 2

Which concept ensures that a sender cannot deny having sent a message by using digital signatures?

Accepted Answer

Non-repudiation

Answer

Non-repudiation, achieved through digital signatures, cryptographically binds the sender to a message, preventing denial.

Question 3

What is the main security risk associated with using outdated SSL 3.0 or TLS 1.0 protocols?

Accepted Answer

They contain known vulnerabilities like POODLE and BEAST that allow traffic decryption

Answer

Older SSL/TLS versions have known cryptographic weaknesses exploited by attacks like POODLE and BEAST, enabling plaintext recovery.

Question 4

What does data masking accomplish in a data protection strategy?

Accepted Answer

Replaces sensitive data with realistic but fictitious values for non-production use

Answer

Data masking substitutes real sensitive values with fictitious but structurally similar data, protecting privacy in testing environments.

Question 5

Which US federal law primarily governs the protection of health information and mandates security safeguards?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) mandates administrative, physical, and technical safeguards for protected health information (PHI).

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX CSX Cryptography and Data Protection 2