Security Terminology N10-009 Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   Which security goal is primarily concerned with ensuring that data is not disclosed to unauthorized individuals or processes?

   • ANon-repudiation
   • BAvailability
   • CIntegrity
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company has identified that its customer database has a critical vulnerability that could lead to a data breach. The cost to implement the fix is $50,000. The company estimates that a breach would cost $500,000 in fines, legal fees, and lost business. The likelihood of a breach occurring in the next year is estimated at 10%. Which of the following is the BEST decision from a risk management perspective?

   • ADo not implement the fix because the likelihood of a breach is low
   • BImplement the fix only if the company can afford it
   • CImplement the fix because the expected loss ($50,000) exceeds the cost of the fix
   • DTransfer the risk by purchasing insurance instead of fixing the vulnerability
   Reveal Solution Discussion Select an answer first