A company has an IRM policy that grants the marketing team View and Edit rights to a product launch document. The company decides to change the policy to also allow the sales team to view the document. What is the best way to implement this change?

Send the document to the sales team with a note explaining the access rights

Create a new IRM policy for the sales team and apply it to the document

Re-encrypt the document with a new key and distribute it to both teams

Update the existing IRM policy to add the sales team with View rights

What is the role of Adobe LiveCycle in the context of IRM?

It is a database encryption tool

It is a firewall for cloud networks

It is a document management system that includes rights management capabilities

Which method is used to invalidate a previously issued IRM certificate?

Disabling the user's network adapter

Adding the certificate to a certificate revocation list (CRL)

Deleting the user's local files

Changing the user's display name

Which of the following is a common IRM technology?

Azure RMS (Azure Rights Management)

Microsoft Defender for Endpoint

A company shares a confidential proposal with a partner. The partner's employee accidentally forwards the proposal to an unauthorized person. The company wants to prevent this from happening again and also wants to ensure that if it does happen, the unauthorized person cannot read the content. Which combination of IRM controls should the company implement?

Disable the Forward right for the partner, and enable an expiration date for the document

Enable the View right only for the partner, and rely on the partner's internal policies

Disable the Copy right for the partner, and require a password to open the document

Enable the Edit right for the partner, and revoke the document after the partnership ends

Certified Cloud Security Professional

Domain 2Objective 6

Design and Implement Information Rights Management (IRM) CCSP Practice Questions (Page 4)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

20%of the exam

Questions 16–20

16application · medium
A company has an IRM policy that grants the marketing team View and Edit rights to a product launch document. The company decides to change the policy to also allow the sales team to view the document. What is the best way to implement this change?
Select an answer first
17foundation · easy
What is the role of Adobe LiveCycle in the context of IRM?
Select an answer first
18foundation · easy
Which method is used to invalidate a previously issued IRM certificate?
Select an answer first
19foundation · easy
Which of the following is a common IRM technology?
Select an answer first
20expert · hard
A company shares a confidential proposal with a partner. The partner's employee accidentally forwards the proposal to an unauthorized person. The company wants to prevent this from happening again and also wants to ensure that if it does happen, the unauthorized person cannot read the content. Which combination of IRM controls should the company implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.