ISACA Protection of Information Assets 4 — Questions and Answers
Question 1: Which of the following BEST describes the concept of defense-in-depth?
- Using the most advanced firewall available as the sole security control
- Applying multiple overlapping security controls so that the failure of one does not expose the system (Correct answer)
- Concentrating all security resources on the most critical assets
- Encrypting all data both in transit and at rest
Correct answer: Applying multiple overlapping security controls so that the failure of one does not expose the system
Defense-in-depth uses multiple layers of security controls so that if one layer fails, others still provide protection.
Question 2: An organization implements multifactor authentication (MFA). Which combination represents true multifactor authentication?
- A password and a security question
- A PIN and a smart card (Correct answer)
- A username and a password
- A passphrase and a secondary passphrase
Correct answer: A PIN and a smart card
A PIN (something you know) combined with a smart card (something you have) satisfies two distinct authentication factors.
Question 3: Which of the following BEST describes the role of a Certificate Revocation List (CRL)?
- A list of approved certificate authorities trusted by the organization
- A list of digital certificates that have been invalidated before their expiration date (Correct answer)
- A directory of all active public keys in the PKI environment
- A schedule for renewing expiring digital certificates
Correct answer: A list of digital certificates that have been invalidated before their expiration date
A CRL is published by a CA to list certificates that have been revoked and should no longer be trusted.
Question 4: Data loss prevention (DLP) tools are PRIMARILY designed to:
- Block ransomware from encrypting corporate files
- Detect and prevent unauthorized transmission of sensitive data (Correct answer)
- Monitor user behavior for insider threat indicators
- Back up critical data to an off-site location automatically
Correct answer: Detect and prevent unauthorized transmission of sensitive data
DLP tools inspect data in motion, at rest, and in use to prevent sensitive information from leaving the organization without authorization.
Question 5: Which type of malware disguises itself as legitimate software to trick users into installing it?
- Worm
- Rootkit
- Trojan horse (Correct answer)
- Logic bomb
Correct answer: Trojan horse
A Trojan horse masquerades as benign or useful software while carrying a malicious payload, tricking users into executing it.
Question 6: When assessing third-party vendor security, which document MOST comprehensively defines required security obligations?
- Service Level Agreement (SLA)
- Non-Disclosure Agreement (NDA)
- Master Service Agreement (MSA)
- Data Processing Agreement (DPA) with security annexes (Correct answer)
Correct answer: Data Processing Agreement (DPA) with security annexes
A Data Processing Agreement with security annexes specifies technical and organizational security requirements for vendors handling personal or sensitive data.
Question 7: Which of the following BEST describes the purpose of security awareness training?
- To replace technical controls with human-based controls
- To reduce human error and improve recognition of social engineering attacks (Correct answer)
- To certify employees in information security standards
- To document employee compliance with security policies
Correct answer: To reduce human error and improve recognition of social engineering attacks
Security awareness training aims to reduce risk by educating users to recognize threats like phishing and practice safe security behaviors.
ISACA Protection of Information Assets 4
Which of the following BEST describes the concept of defense-in-depth?