A software company needs to securely exchange encryption keys with a new business partner over the internet. The partner will use the key to encrypt files that they send to the company. Which encryption approach is most appropriate for this key exchange?

Use asymmetric encryption for all file encryption to avoid the need for a shared key.

Use a hash function to generate a key that both parties can compute independently.

Use asymmetric encryption to exchange a symmetric session key, then use the symmetric key for encrypting the files.

Use symmetric encryption with a pre-shared key that is sent via email.

What is the purpose of implementing strong access control on backup systems?

To prevent unauthorized users from accessing or modifying backup data

To automatically encrypt all backup data

To reduce the storage capacity needed for backups

To increase the speed of backup operations

Which security measure is essential for securing MySQL interfaces?

Using the default root account without a password

Enforcing strong authentication for database users

Disabling all network access to the database

Storing database credentials in plain text configuration files

A security architect is designing an encryption solution for a new product that will store sensitive customer data. The product will be deployed in multiple regions and must comply with a regulation that requires encryption keys to be rotated annually. Which key management practice best supports this requirement?

Use a single long-term key for all data to simplify management.

Generate a new key for each encryption operation and store it in a database.

Use a centralized key management service (KMS) that supports automated key rotation.

Store encryption keys in the application's configuration file for easy access.

What does the data security principle of 'protection against corruption' primarily aim to prevent?

Loss of data due to hardware failure

Unauthorized modification or destruction of data

Unauthorized disclosure of data to third parties

Slow performance of database queries

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 1

Objective 3.1 Protect Data. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 7)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

41questions here

9free pages

12concepts

28%of the exam

Questions 31–35

31application · medium
A software company needs to securely exchange encryption keys with a new business partner over the internet. The partner will use the key to encrypt files that they send to the company. Which encryption approach is most appropriate for this key exchange?
Select an answer first
32foundation · easy
What is the purpose of implementing strong access control on backup systems?
Select an answer first
33foundation · easy
Which security measure is essential for securing MySQL interfaces?
Select an answer first
34application · medium
A security architect is designing an encryption solution for a new product that will store sensitive customer data. The product will be deployed in multiple regions and must comply with a regulation that requires encryption keys to be rotated annually. Which key management practice best supports this requirement?
Select an answer first
35foundation · easy
What does the data security principle of 'protection against corruption' primarily aim to prevent?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.