5.1 - Understand Data Security CC Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In asymmetric encryption, what is the relationship between the public key and the private key?

   • AThe public key is derived from the private key, and they are used as a pair.
   • BThey are unrelated and can be used separately without any mathematical link.
   • CThey are identical and interchangeable.
   • DThe private key is derived from the public key, and they are used independently.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which scenario is a typical use case for asymmetric encryption?

   • ASecurely exchanging a symmetric key over an untrusted network
   • BHashing passwords for storage
   • CEncrypting large files on a hard drive
   • DEnsuring data integrity with a checksum
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company's SIEM generates thousands of alerts per day, but the security team is overwhelmed and misses critical incidents. The team wants to improve the effectiveness of monitoring without increasing headcount. Which approach is most effective?

   • ADisable alerts for low-severity events to reduce volume.
   • BIncrease the number of log sources feeding the SIEM.
   • CTune correlation rules and implement alert prioritization to reduce false positives.
   • DHire more security analysts.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company needs to securely transmit a large file to a partner. The file is too large for asymmetric encryption to be efficient. However, the company wants to ensure that only the partner can decrypt the file. Which approach should they use?

   • AEncrypt the file with a symmetric key and send the key in a separate email.
   • BHash the file and encrypt the hash with the partner's public key.
   • CEncrypt the file with the partner's public key using RSA.
   • DGenerate a random symmetric key, encrypt the file with it, and encrypt the symmetric key with the partner's public key.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security analyst is investigating a suspected breach. The organization's SIEM has been collecting logs, but the analyst notices that some critical events are missing from the logs. The analyst suspects that an attacker may have deleted logs. Which additional control would best help detect and prevent log tampering?

   • AEncrypt all logs with a symmetric key.
   • BForward logs to a centralized, write-once, read-many (WORM) storage system.
   • CIncrease the verbosity of logging on all systems.
   • DStore logs on the local system only.
   Reveal Solution Discussion Select an answer first