What is the effect of revoking a user's IRM certificate?

The user's email account is deleted

The user can no longer access protected content

A company is evaluating IRM solutions and wants to protect documents and emails across multiple platforms, including Windows, macOS, and mobile devices. Which technology is best suited for this requirement?

A custom-built IRM solution using open-source encryption libraries

Azure Information Protection (Azure RMS)

A simple file encryption tool that uses a shared password

Adobe LiveCycle Rights Management

A company uses an IRM solution that integrates with its identity provider and key management system. When a user attempts to open a protected document, the IRM client requests a license from the IRM server. What is the role of the key management system in this process?

It generates the user's certificate that binds the rights to the user

It stores the IRM policies that define the rights for each document

It provides the encryption keys that are used to decrypt the document and enforce the rights

It authenticates the user and verifies their identity before the license is issued

A company's IRM system issues certificates that are valid for one year. The company wants to ensure that a user who leaves the organization can no longer access protected content immediately. Which action is the most effective?

Delete the user's account from the identity provider

Change the IRM policy to deny access to the user

Wait for the certificate to expire naturally

Revoke the user's certificate in the IRM system

Which capability is a key objective of Information Rights Management (IRM)?

Encrypting all data in transit between cloud services

Auditing who accessed protected content and what actions they performed

Preventing all unauthorized access to the network

Ensuring data is backed up regularly

Certified Cloud Security Professional

Domain 2Objective 6

Design and Implement Information Rights Management (IRM) CCSP Practice Questions (Page 1)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

20%of the exam

Questions 1–5

1foundation · easy
What is the effect of revoking a user's IRM certificate?
Select an answer first
2application · medium
A company is evaluating IRM solutions and wants to protect documents and emails across multiple platforms, including Windows, macOS, and mobile devices. Which technology is best suited for this requirement?
Select an answer first
3application · medium
A company uses an IRM solution that integrates with its identity provider and key management system. When a user attempts to open a protected document, the IRM client requests a license from the IRM server. What is the role of the key management system in this process?
Select an answer first
4expert · hard
A company's IRM system issues certificates that are valid for one year. The company wants to ensure that a user who leaves the organization can no longer access protected content immediately. Which action is the most effective?
Select an answer first
5foundation · easy
Which capability is a key objective of Information Rights Management (IRM)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.