IGP Technology & Information Security 2

Question 1

Which encryption standard is currently recommended by NIST for protecting sensitive US government data at rest?

Accepted Answer

AES-256

Answer

NIST recommends AES-256 for protecting sensitive government data at rest, as 3DES is deprecated and RC4/Blowfish are not approved for federal use.

Question 2

In information governance, what does a Data Loss Prevention (DLP) system primarily do?

Accepted Answer

Monitors and restricts unauthorized transfer of sensitive data

Answer

DLP systems detect and prevent unauthorized transmission or exfiltration of sensitive information across network, endpoint, and cloud channels.

Question 3

What is the primary purpose of a Security Information and Event Management (SIEM) system?

Accepted Answer

Aggregate and correlate security logs for threat detection

Answer

SIEM systems collect, aggregate, and correlate security event logs from multiple sources to enable real-time threat detection and incident response.

Question 4

An organization wants to ensure that only authorized users access specific cloud resources. Which control best enforces this at the identity layer?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC restricts cloud resource access based on users' assigned roles, ensuring only authorized individuals can access specific resources.

Question 5

Which concept describes the practice of granting users only the minimum access rights necessary to perform their job functions?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits user permissions to the minimum required for their role, reducing the attack surface if credentials are compromised.

(IGP) Information Governance Professional Practice Test

(IGP) Information Governance Professional Practice Test

IGP Technology & Information Security 2