A company has an IRM policy that grants the finance team full control over budget documents. A finance employee leaves the company, and the administrator needs to ensure the former employee can no longer open any previously protected documents. What is the most effective action?

Re-encrypt all budget documents with a new key and distribute it only to current employees

Delete the user's account from the identity provider

Revoke the user's IRM certificate or remove the user from the finance group

Change the IRM policy to deny access to all former employees

A pharmaceutical company shares a confidential research report with external partners. The report must remain unreadable after the partnership ends, and the company needs to know who accessed it and when. Which IRM capability is most directly required to meet both requirements?

A watermark embedded in the document that identifies the original recipient

A one-time encryption key shared with all partners for the duration of the project

A secure file transfer protocol that encrypts the file during transmission only

Persistent protection that travels with the file and audit logging of access attempts

Certified Cloud Security Professional

Domain 2Objective 6

Design and Implement Information Rights Management (IRM) CCSP Practice Questions (Page 6)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

20%of the exam

Questions 26–28

26application · medium
An organization uses an IRM system where access rights are assigned based on the user's department. The finance department has Edit rights to budget documents, while the HR department has View rights to the same documents. Which access model is being used?
Select an answer first
27application · medium
A company has an IRM policy that grants the finance team full control over budget documents. A finance employee leaves the company, and the administrator needs to ensure the former employee can no longer open any previously protected documents. What is the most effective action?
Select an answer first
28application · medium
A pharmaceutical company shares a confidential research report with external partners. The report must remain unreadable after the partnership ends, and the company needs to know who accessed it and when. Which IRM capability is most directly required to meet both requirements?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Design and Implement Information Rights Management (IRM) CCSP Practice Questions (Page 6)

Questions 26–28

An organization uses an IRM system where access rights are assigned based on the user's department. The finance department has Edit rights to budget documents, while the HR department has View rights to the same documents. Which access model is being used?

A company has an IRM policy that grants the finance team full control over budget documents. A finance employee leaves the company, and the administrator needs to ensure the former employee can no longer open any previously protected documents. What is the most effective action?

A pharmaceutical company shares a confidential research report with external partners. The report must remain unreadable after the partnership ends, and the company needs to know who accessed it and when. Which IRM capability is most directly required to meet both requirements?

Keep studying — Cloud Data Security