vmartinez

 

Fill in the blank: A security _____ is a set of guidelines used for building plans to help mitigate risk and threats to data and privacy.

 

• control
• framework
• regulation
• lifecycle

 

 

Which of the following tasks may be part of the identity and access management domain? Select all that apply.

 

• Conducting security control testing
• Setting up an employee’s access keycard
• Ensuring users follow established policies
• Controlling physical assets

 

 

A security professional is optimizing data security by ensuring that effective tools, systems, and processes are in place. Which domain does this scenario describe?

 

• Communication and network security
• Security architecture and engineering
• Security and risk management
• Identity and access management

 

 

A security professional is setting up access keycards for new employees. Which domain does this scenario describe?

 

• Identity and access management

• Communication and network security
• Security and risk management
• Security assessment and testing

 

 

Which of the following tasks may be part of the security assessment and testing domain? Select all that apply.

 

• Auditing user permissions
• Securing physical networks and wireless communications
• Conducting security audits
• Collecting and analyzing data

 

 

Which domain involves securing digital and physical assets, as well as managing the storage, maintenance, retention, and destruction of data?

 

• Asset security

• Communication and network security
• Security assessment and testing
•  Security operations