ISACA Protection of Information Assets 2

Question 1

Which encryption mode is most appropriate for encrypting large amounts of data where parallel processing is desired?

Accepted Answer

Counter (CTR)

Answer

Counter (CTR) mode allows parallel encryption and decryption of blocks, making it ideal for large data sets.

Question 2

A data owner is PRIMARILY responsible for which of the following?

Accepted Answer

Classifying data and defining access rules

Answer

The data owner is accountable for classifying information and establishing appropriate access control policies.

Question 3

Which of the following BEST describes a rainbow table attack?

Accepted Answer

Using precomputed hash values to reverse password hashes

Answer

A rainbow table attack uses precomputed tables of hash values to quickly reverse hashed passwords.

Question 4

An organization wants to ensure that sensitive data cannot be recovered after hard drive disposal. Which method provides the STRONGEST assurance?

Accepted Answer

Physical destruction of the drive

Answer

Physical destruction (shredding, crushing) provides the strongest assurance that data cannot be recovered from disposed media.

Question 5

Which access control model assigns permissions based on the sensitivity label of information and the security clearance of users?

Accepted Answer

Mandatory Access Control (MAC)

Answer

Mandatory Access Control (MAC) uses security labels and clearances to govern access, and is common in government/military environments.

(ISACA) Information Systems Audit and Control Association Certification Practice Test