How can an IRM policy be updated after it has been applied to a document?

By re-encrypting the document with a new key

By editing the policy in the IRM administration console

By deleting the document and recreating it

By asking each user to change their local settings

Which component is typically involved in issuing an IRM certificate to a user?

A certification authority (CA) within the IRM infrastructure

The user's local printer driver

The cloud provider's billing system

A company has an IRM policy that grants the sales team View rights to a pricing document. The company wants to temporarily allow the sales team to edit the document for one week, and then automatically revert to View-only. Which approach is most effective?

Update the IRM policy to grant Edit rights to the sales team, and set an expiration date for the Edit right

Create a new IRM policy that grants Edit rights, and manually revert the policy after one week

Grant the sales team Full Control rights, and rely on the document owner to monitor the activity

Send the document to the sales team with a password that expires after one week

What is a key characteristic of user-based access in an IRM system?

Rights are assigned to a named individual

Rights are automatically granted to all employees

Rights are inherited from the user's manager

Rights are assigned based on the user's department

A company has an IRM policy that grants the engineering team Edit rights to a design document. The company discovers that a former engineer still has a copy of the document and can open it. What is the most likely reason the former engineer can still access the document?

The engineer's IRM certificate was not revoked or the user was not removed from the engineering group

The document was not encrypted with IRM

The engineer used a different device that does not enforce IRM

The IRM policy was not updated to remove the engineer

Certified Cloud Security Professional

Domain 2Objective 6

Design and Implement Information Rights Management (IRM) CCSP Practice Questions (Page 2)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

20%of the exam

Questions 6–10

6foundation · easy
How can an IRM policy be updated after it has been applied to a document?
Select an answer first
7foundation · easy
Which component is typically involved in issuing an IRM certificate to a user?
Select an answer first
8expert · hard
A company has an IRM policy that grants the sales team View rights to a pricing document. The company wants to temporarily allow the sales team to edit the document for one week, and then automatically revert to View-only. Which approach is most effective?
Select an answer first
9foundation · easy
What is a key characteristic of user-based access in an IRM system?
Select an answer first
10application · medium
A company has an IRM policy that grants the engineering team Edit rights to a design document. The company discovers that a former engineer still has a copy of the document and can open it. What is the most likely reason the former engineer can still access the document?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.