Question 31
Which of the following is considered a records management best practice?
- Archiving expired data records and files.
- Storing decryption keys with their associated backup systems.
- Implementing consistent handling practices across all record types.
- Using classification to determine access rules and retention policy.
Question 32
Which of the following provides a mechanism that allows an end-user to use a single sign-on (SSO) for multiple services?
- The Open ID Federation.
- PCI Data Security Standards Council
- International Organization for Standardization.
- Personal Information Protection and Electronic Documents Act.
Question 33
A user who owns a resource wants to give other individuals access to the resource. What control would apply?
- Mandatory access control.
- Role-based access controls.
- Discretionary access control.
- Context of authority controls.
Question 34
What is the potential advantage of homomorphic encryption?
- Encrypted information can be analyzed without decrypting it first.
- Ciphertext size decreases as the security level increases.
- It allows greater security and faster processing times.
- It makes data impenetrable to attacks.
Question 35
What has been found to undermine the public key infrastructure system?
- Man-in-the-middle attacks.
- Inability to track abandoned keys.
- Disreputable certificate authorities.
- Browsers missing a copy of the certificate authority's public key.