SY0-601 Governance, Risk & Compliance

Question 1

A company purchases cyber insurance to offset potential financial losses from a data breach. Which risk response strategy does this represent?

Accepted Answer

Risk transfer

Answer

Risk avoidance

Answer

Risk mitigation

Answer

Risk acceptance

Question 2

An organization labels its most sensitive data as 'Confidential' and its public-facing data as 'Public.' What security concept is being applied?

Accepted Answer

Data classification

Answer

Data retention

Answer

Data masking

Answer

Data sovereignty

Question 3

Which regulation requires organizations processing EU citizens' personal data to notify authorities of a breach within 72 hours and obtain explicit consent before collection?

Accepted Answer

GDPR

Answer

HIPAA

Answer

PCI-DSS

Answer

SOX

Question 4

During a Business Impact Analysis, which metric defines the maximum length of time a critical business function can be unavailable before causing unacceptable harm to the organization?

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

Recovery Time Objective (RTO)

Answer

Recovery Point Objective (RPO)

Answer

Mean Time to Recover (MTTR)

Question 5

A company's payroll system can tolerate losing no more than 4 hours of transaction data in the event of a disaster. Which metric does this describe?

Accepted Answer

Recovery Point Objective (RPO)

Answer

Maximum Tolerable Downtime (MTD)

Answer

Recovery Time Objective (RTO)

Answer

Mean Time Between Failures (MTBF)

Question 6

Which function of the NIST Cybersecurity Framework focuses on developing organizational understanding of cybersecurity risks to systems, assets, and data?

Accepted Answer

Identify

Answer

Protect

Answer

Detect

Answer

Respond

Question 7

Which security policy document defines the rules employees must follow when using company-owned computers, networks, and internet access?

Accepted Answer

Acceptable Use Policy (AUP)

Answer

Data Retention Policy

Answer

Clean Desk Policy

Answer

Non-Disclosure Agreement (NDA)