SY0-601 Governance, Risk & Compliance

Question 1

A company purchases cyber insurance to offset potential financial losses from a data breach. Which risk response strategy does this represent?

Accepted Answer

Risk transfer

Answer

Risk transfer shifts the financial burden of a risk to a third party, such as through purchasing cyber insurance.

Question 2

An organization labels its most sensitive data as 'Confidential' and its public-facing data as 'Public.' What security concept is being applied?

Accepted Answer

Data classification

Answer

Data classification categorizes data based on its sensitivity level so that appropriate security controls can be applied.

Question 3

Which regulation requires organizations processing EU citizens' personal data to notify authorities of a breach within 72 hours and obtain explicit consent before collection?

Accepted Answer

GDPR

Answer

GDPR (General Data Protection Regulation) mandates 72-hour breach notification and explicit consent for processing EU citizens' personal data.

Question 4

During a Business Impact Analysis, which metric defines the maximum length of time a critical business function can be unavailable before causing unacceptable harm to the organization?

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

Maximum Tolerable Downtime (MTD) defines the absolute outer limit of downtime before the impact becomes unacceptable to the business.

Question 5

A company's payroll system can tolerate losing no more than 4 hours of transaction data in the event of a disaster. Which metric does this describe?

Accepted Answer

Recovery Point Objective (RPO)

Answer

Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss, measured in time, that an organization can tolerate.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Governance, Risk & Compliance