Practice Test Geeks(CSX) Cybersecurity Nexus Certification Practice Test
← All CSX Flashcard Decks

CSX Cryptography and Data Protection Flashcards

6 cards from real CSX practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 CSX Cryptography and Data Protection flashcards as text

  1. What is the purpose of key escrow in an enterprise data protection program?

    Answer: To store copies of encryption keys with a trusted third party for recovery

    Key escrow involves depositing encryption keys with a trusted authority to enable data recovery if keys are lost or personnel leave.

  2. Which concept ensures that a sender cannot deny having sent a message by using digital signatures?

    Answer: Non-repudiation

    Non-repudiation, achieved through digital signatures, cryptographically binds the sender to a message, preventing denial.

  3. What is the main security risk associated with using outdated SSL 3.0 or TLS 1.0 protocols?

    Answer: They contain known vulnerabilities like POODLE and BEAST that allow traffic decryption

    Older SSL/TLS versions have known cryptographic weaknesses exploited by attacks like POODLE and BEAST, enabling plaintext recovery.

  4. What does data masking accomplish in a data protection strategy?

    Answer: Replaces sensitive data with realistic but fictitious values for non-production use

    Data masking substitutes real sensitive values with fictitious but structurally similar data, protecting privacy in testing environments.

  5. Which US federal law primarily governs the protection of health information and mandates security safeguards?

    Answer: HIPAA

    HIPAA (Health Insurance Portability and Accountability Act) mandates administrative, physical, and technical safeguards for protected health information (PHI).

  6. What is the purpose of full-disk encryption (FDE) on endpoint devices?

    Answer: To protect data confidentiality if a device is lost or stolen

    Full-disk encryption ensures that all data on a device is unreadable without the correct credentials, protecting against physical theft.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. isaca.org — Test delivery, eligibility, fees, passing score, registration deadline, renewal, retake fee, retake policy, score release, time limit · verified Oct 2026