Online Access Free CPIM-8.0 Practice Test

Which assessing whether real-world threats to the security of an application have been mitigated, what is MOST effective source to confirm that sufficient security controls are in place for both end users and customers?

• A.Third-party reviews
• B.Software security team
• C.Senior management
• D.Product management

A security practitioner has been asked to investigate the presence of customer Personally Identifiable Information (PII) on a social media website. Where does the practitioner begin?

• A.Review logs of all user ' s social media activity.
• B.Review the organizational social media policy.
• C.Determine a list of information assets that contain PII.
• D.Initiate the organization ' s incident response plan.

Who is ultimately responsible for ensuring that specific data is protected?

• A.Data owner
• B.Custodian
• C.System owner
• D.Data controller

An organization experienced multiple compromises of endpoints, leading to breaches of systems and data. In updating its strategy to defend against these threats, which of the following BEST considers the organization's needs?

• A.Zero Trust (ZT) threat modeling
• B.Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE)
• C.Process for Attack Simulation and Threat Analysis (PASTA)
• D.Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege (STRIDE)

What BEST describes the end goal of a Disaster Recovery (DR) program?

• A.Continue business operations during a contingency.
• B.Review the status of mission-critical applications.
• C.Restore normal business operations.
• D.Prevent business interruption.