Domain 2 - Asset Security

Question 1

What is Data Remanence?

Answer 1

Data remanence is the data that remains on media after the data was supposedly erased.

Question 2

What does a degausser do?

Answer 2

It removes information from media by generating a strong magnetic field

Question 3

What does Erasing media mean?

Answer 3

Erasing media is simply performing a delete operation against a file, a selection of files or the entire media.

Question 4

What does Clearing media mean?

Answer 4

Cleaning or overwriting is a process of preparing media for reuse and ensuring that the cleared data cannot be recovered using traditional recovery tools

Question 5

What does Purging media mean?

Answer 5

Purging is a more intense form of cleaning that prepared media for reuse in less secure environments

Question 6

What is Declassification?

Answer 6

Declassification involves any process that purges media or a system in preparation for reuse in an unclassified environment.

Question 7

What is the catch with L2TP?

Answer 7

L2TP transmits data in cleartext, but L2TP/IPsec encrypts data and sends it over the internet using tunnel mode to protect it while in transit.

Question 8

What are the responsibilities of the Data Owner?

Answer 8

The Data Owner is the person who has ultimate responsibility for the data. They establish the rules for appropriate use, provides input on security requirements, decide who has access, and assists in the identification and assessment of the common security controls.

Question 9

What are the responsibilities of the Asset Owners?

Answer 9

The asset owner (or system owner) is the person who owns the asset or system that processes sensitive data. They maintain the system security plan and ensure that personnel receives appropriate security training.

Question 10

What are the responsibilities of the Data Processors?

Answer 10

The data processors process personal data on behalf of the data controller (owner).

Question 11

What is the penelty for GDPR?

Answer 11

4% of global revenue or 20 euro, which ever is higher

Question 12

What is Pseudonymization?

Answer 12

Replacing data with articifial identifiers (such as pseudonyms.

Question 13

What is Tokenization?

Answer 13

Tokenization uses tokens to represent other data.

Question 14

What are the responsibilities of the Data Administrators?

Answer 14

A data administrator is responsible for granting appropriate access to personnel.

Question 15

What are the responsibilities of the Data Custodians?

Answer 15

Data owners often delegate day-to-day tasks to a custodian

Question 16

What is scoping?

Answer 16

Scoping refers to reviewing a list of baseline security controls and selecting only those controls to the system you’re trying to protect.

Question 17

What is tailoring?

Answer 17

Tailoring refers to modifying the list of security controls within a baseline so that they align with the mission of the organization.