IGP Technology & Information Security 3

Question 1

Under NIST SP 800-53, which control family addresses audit and accountability requirements?

Accepted Answer

Audit and Accountability (AU)

Answer

NIST SP 800-53's Audit and Accountability (AU) control family covers requirements for creating, protecting, and retaining audit records.

Question 2

A company stores customer PII in a database. Which technique replaces sensitive values with non-sensitive placeholders while preserving referential integrity?

Accepted Answer

Tokenization

Answer

Tokenization substitutes sensitive data values with non-sensitive tokens that can reference the original data, preserving system functionality without exposing PII.

Question 3

Which attack type involves inserting malicious SQL commands into an input field to manipulate a database?

Accepted Answer

SQL injection

Answer

SQL injection attacks exploit inadequate input validation by inserting SQL commands that manipulate or expose database contents.

Question 4

In the context of information security, what does 'non-repudiation' ensure?

Accepted Answer

A sender cannot deny having sent a message

Answer

Non-repudiation provides proof of the origin and integrity of data, ensuring that a sender cannot later deny having sent a message or performed an action.

Question 5

What is the primary function of a Public Key Infrastructure (PKI)?

Accepted Answer

Issue and manage digital certificates that bind public keys to identities

Answer

PKI is a framework that issues, manages, and revokes digital certificates that cryptographically bind a public key to an entity's identity.

(IGP) Information Governance Professional Practice Test

(IGP) Information Governance Professional Practice Test

IGP Technology & Information Security 3