vmartinez

 

A security professional is setting up access keycards for new employees. Which domain does this scenario describe?

 

• Identity and access management

• Communication and network security
• Security and risk management
• Security assessment and testing

 

 

Which of the following tasks may be part of the security assessment and testing domain? Select all that apply.

 

• Auditing user permissions
• Securing physical networks and wireless communications
• Conducting security audits
• Collecting and analyzing data

 

 

Which domain involves securing digital and physical assets, as well as managing the storage, maintenance, retention, and destruction of data?

 

• Asset security

• Communication and network security
• Security assessment and testing
•  Security operations

 

 

Which domain involves optimizing data security by ensuring that effective tools, systems, and processes are in place?

 

• Communication and network security
• Security and risk management
• Identity and access management
• Security architecture and engineering

 

 

Which of the following tasks are part of the security and risk management domain? Select all that apply.

 

• Securing physical assets
• Defining security goals and objectives
• Compliance
• Business continuity

 

 

A security professional conducts internal training to teach their coworkers how to identify a social engineering attack. What types of security issues are they trying to avoid? Select all that apply.

 

• Employees inadvertently revealing sensitive data
• Overtaxing systems with too many internal emails
• Phishing attacks
• Malicious software being deployed