Online Access Free CPIM-8.0 Practice Test

Which of the following controls should a financial Institution have in place in order to prevent a trader from both entering and executing a trade?

• A.Least privilege
• B.Two-Factor Authentication (2FA)
• C.Separation of Duties (SoD)
• D.Cameras in the trading room

Which of the following factors is the MOST important consideration for a security team when determining when determining whether cryptographic erasure can be used for disposal of a device?

• A.If the methods meet the International organization For Standardization/International Electrotechnical Commission (ISO/IEC) 27001.
• B.If the security policies allow for cryptographic erasure based on the data stored on the device.
• C.If the data on the device exceeds what cryptographic erasure can safely process.
• D.If the device was encrypted prior using cipher block chaining.

A multinational organization acquires a subsidiary. The acquisition results in the need to integrate a large population of new users into the organization ' s corporate cloud. What is the MAIN benefit of the organization ' s Federated Identity Management (FIM) system to address the need?

• A.Efficient access provisioning
• B.Reduced complexity of maintenance and changes
• C.Increased robustness of authentication
• D.Greater flexibility of access control

Which of the following are compromised in an untrusted network using public key cryptography when a digitally signed message is modified without being detected?

• A.Confidentiality and availability
• B.Integrity and non-repuditation
• C.Integrity and authentication
• D.Integrity and availability

Which of the following threats MUST be included while conducting threat modeling for a Cloud Service Provider (CSP)?

• A.Threats originating from the CSP's tenants that can impact the infrastructure and other tenants
• B.Vulnerabilities in shared resources that can be exploited by attackers to affect multiple tenants
• C.Risks of data breaches that can result from inadequate encryption of tenant data in transit and at rest
• D.Potential legal actions from third parties due to tenants' activities on the CSP's platform