CPIM-8.0 Exam Dumps | Payment Card Industry Data Security Standard (PCI DSS) allows for scanning a statistical sample of the

<< Prev Question Next Question >>

Question 165/247

Payment Card Industry Data Security Standard (PCI DSS) allows for scanning a statistical sample of the environment without scanning the full environment. Scanning a statistical sample has many advantages and disadvantages.
Which of the following is the MOST accurate set of advantages and disadvantages?

A. Easy for auditors to question, fastest scanning method, ideal for cloud environments, and not suitable for small organizations

B. Confirmation of Configuration Management (CM), hand selection introduces confirmation bias, is ideal in operational technology environments, and requires about 10% of each environment/platform

C. Limited to a single environment/platform, proves image standardization, random selection misses end- to-end applications, and slower than targeted scanning

D. Limited risk to production targets, rapid scan times, requires proof of image standardization, and one- offs systems are not scanned

Question List (247q): Question 1: Which of the following provides that redundancy and failover...; Question 2: The demand for an item has increasing forecast error, wherea...; Question 3: An organization has hired a new auditor to review its critic...; Question 4: A security team member is assessing an organization's backup...; Question 5: Which of the following documents is the BEST reference to de...; Question 6: Network Access Control (NAC) is used to perform what functio...; Question 7: An organization is updating an Application Programming Inter...; Question 8: A statistical safety stock calculation would be appropriate ...; Question 9: Which of the following represents the level of confidence th...; Question 10: What is a strategic process that is aimed at considering pos...; Question 11: A regular remote user executed an application that allowed t...; Question 12: An organization recently created a new accounting department...; Question 13: What is the HIGHEST security concern on trans-border data?...; Question 14: In preparing for a facility location decision, proximity to ...; Question 15: Which of the following is a core subset of The Open Group Ar...; Question 16: Which approach will BEST mitigate risks associated with root...; Question 17: A large volume of outbound Transmission Control Protocol (TC...; Question 18: An organization intends to host an application on a multi-te...; Question 19: Which of the following stock location systems would you use ...; Question 20: While conducting penetration testing, one of the testers not...; Question 21: Which of the following threats MUST be included while conduc...; Question 22: Which of the following planes directs the flow of data withi...; Question 23: A warehouse manager assigns orders to warehouse personnel gr...; Question 24: What is an important countermeasure to consider when hardeni...; Question 25: Which of the following situations is most likely to occur wh...; Question 26: Which authentication method is used by an email server to ve...; Question 27: An organization has identified that an individual has failed...; Question 28: Which of the following methods places a replenishment order ...; Question 29: An organizations is developing a new software package for a ...; Question 30: Before securing a email system using OpenPGP in an organizat...; Question 31: What is the MAIN reason security is considered as part of th...; Question 32: Which of the following outcomes Is a benefit of mixed-model ...; Question 33: An organization has been struggling to improve their securit...; Question 34: An organization has implemented a control that requires user...; Question 35: Which of the following is the workflow of the identity and a...; Question 36: Health information stored in paper form may be destroyed usi...; Question 37: Marketing has requested a significant change in the mix for ...; Question 38: A vendor has been awarded a contract to supply key business ...; Question 39: An organization currently has a network with 55,000 unique I...; Question 40: An information system security manager is tasked with proper...; Question 41: Which burden of proof has been applied when a workplace inve...; Question 42: What is the BEST reason to include a Hardware Security Modul...; Question 43: An organization donates used computer equipment to a non-pro...; Question 44: As the organization requires user friendly access to a new w...; Question 45: Under which of the following conditions is excess capacity m...; Question 46: Which of the following tools is used to evaluate the impact ...; Question 47: A security consultant is recommending the implementation of ...; Question 48: A computer forensic analyst is examining suspected malware f...; Question 49: Disaster Recovery (DR) training plan outcomes should have wh...; Question 50: Labor3 people Work hours10 hours per day Days4 days per week...; Question 51: Which of the following BEST effective when protecting agains...; Question 52: A security consultant is working with an organization to hel...; Question 53: Disaster Recovery Plan (DRP) training can be considered comp...; Question 54: Risk pooling would work best for items with:...; Question 55: Small, independent demands for components and subassemblies ...; Question 56: Broadcast traffic is causing network performance degradation...; Question 57: Which of the following MUST exist for an activity to be cons...; Question 58: Which of the following can allow an attacker to bypass authe...; Question 59: At which Open Systems Interconnection (OSI) layer does User ...; Question 60: In a rapidly changing business environment, a primary advant...; Question 61: An organization experienced multiple compromises of endpoint...; Question 62: Which of the following actions provides the BEST evidence fo...; Question 63: A security engineer has determined the need to implement pre...; Question 64: Which of the following MUST be in place for security to be e...; Question 65: Which of the following circumstances would cause a move from...; Question 66: Increased use of third-party logistics (3PL) services is lik...; Question 67: Which of the following techniques is BEST suited to preserve...; Question 68: When conducting a vulnerability test using a scanner tool, w...; Question 69: A forecasting method that responds slowly to changes in dema...; Question 70: Which of the physiological biometric scanning methods is con...; Question 71: Which Open Systems Interconnection (OSI) layer is concerned ...; Question 72: Which of the following systems would be the most cost-effici...; Question 73: What is the PRIMARY benefit an organization obtains by adapt...; Question 74: What does the Role-Based Access Control (RBAC) method define...; Question 75: Which of the following actions will result In lower inventor...; Question 76: Which of the following is the MAIN element in achieving a su...; Question 77: A security specialist is responsible to improve the security...; Question 78: What is the PRIMARY benefit an organization obtains by cyber...; Question 79: A Generic Routing Encapsulation (GRE) tunnel moves data acro...; Question 80: When implementing a data classification program, Which is MO...; Question 81: Which of the following criteria is used to determine safety ...; Question 82: Which of the following is the BEST reason to conduct a penet...; Question 83: Which is the MOST valid statement around the relationship of...; Question 84: After a data loss event, an organization is reviewing its Id...; Question 85: In a make-to-order (MTO) production environment, fluctuation...; Question 86: Which of the following BEST defines whether an organization ...; Question 87: Which security audit phase is MOST important to ensure corre...; Question 88: An organization wants to ensure the security of communicatio...; Question 89: An information security auditor is creating an audit program...; Question 90: Which of the following BEST describes how an Application Pro...; Question 91: In pyramid forecasting, the "roll up" process begins with:...; Question 92: What FIRST step should a newly appointed Data Protection Off...; Question 93: A semiconductor manufacturer is writing a physical asset han...; Question 94: An organization is planning to streamline its Identity and A...; Question 95: What is the MAIN reason security is considered as part of th...; Question 96: An organization implemented a threat modeling program focusi...; Question 97: According to best practice, at which step in the system life...; Question 98: Asymmetric cryptography uses which type of key to encrypt da...; Question 99: Maintaining software asset security is MOST dependent on wha...; Question 100: Which of the following BEST describes an individual modifyin...; Question 101: A webmaster has repeatedly used the same certificate sign re...; Question 102: Which of the following Secure Shell (SSH) remote access prac...; Question 103: An organization is concerned that if an employee's mobile de...; Question 104: In the context of mobile device security, which of the follo...; Question 105: Which protocol is the BEST option to provide authentication,...; Question 106: A large organization wants to implement a vulnerability mana...; Question 107: An organization is implementing an enterprise resource plann...; Question 108: An organization is retiring an old server out of the data ce...; Question 109: Which of the following should be performed FIRST in the cour...; Question 110: A financial institution is implementing an Information Techn...; Question 111: An order winner during the growth stage of a product's life ...; Question 112: An organization discovered that malicious software was insta...; Question 113: Which of the following BEST describes the responsibility of ...; Question 114: How much data an organization can afford to lose is determin...; Question 115: Which of the following is the MOST important consideration i...; Question 116: Global outsourcing and shared suppliers serving an industry ...; Question 117: Substituting capital equipment in place of direct labor can ...; Question 118: An organization is preparing for a natural disaster, and man...; Question 119: What is the BEST protection method to ensure that an unautho...; Question 120: For a company that uses first in, first out (FIFO) inventory...; Question 121: One of the most useful tools for analyzing the sustainable f...; Question 122: In conducting a new corporate payroll system security review...; Question 123: Which of the following terms below BEST describes the measur...; Question 124: An agency has the requirement to establish a direct data con...; Question 125: An organization wants to ensure a risk does not occur. The a...; Question 126: An information system containing Protected Health Informatio...; Question 127: In which of the following phases of the product life cycle i...; Question 128: Which of the following is a PRIMARY benefit of sharing asses...; Question 129: Which Virtual Private Network (VPN) protocol provides a buil...; Question 130: An external audit is conducted on an organization's cloud In...; Question 131: An organization is aiming to be System and Organization Cont...; Question 132: A software development vendor wants to test the Application ...; Question 133: After reviewing the output of a threat modelling workshop, t...; Question 134: Which of the following categories of web services testing de...; Question 135: Which of the following factors typically would distort a sal...; Question 136: When the discrete available-to-promise (ATP) method is used,...; Question 137: A manufacturer begins production of an item when a customer ...; Question 138: An organization is preparing to deploy Multi-Factor Authenti...; Question 139: The primary purpose for engaging in cycle count activities i...; Question 140: When considering Defense in Depth (DiD) as part of a network...; Question 141: In which of the following environments is capable-to-promise...; Question 142: Which technology is BEST suited to establish a secure commun...; Question 143: The horizon for forecasts that are input to the sales and op...; Question 144: An organization is transitioning from a traditional server-c...; Question 145: Given the bill of material (BOM) information below and indep...; Question 146: Which software development methodology is an iterative custo...; Question 147: A cloud-based web application requires the use of cryptograp...; Question 148: A newly hired Chief Information Security Officer (CISO) is n...; Question 149: A company implementing a localized multi-country strategy to...; Question 150: A manufacturer has a primary assembly line supported by outp...; Question 151: If an organization wanted to protect is data against loss of...; Question 152: A champion is assigned to lead a threat modeling exercise. W...; Question 153: A security engineer needs to perform threat modeling on a mi...; Question 154: A Structured Query Language (SQL) database is hosted on a ha...; Question 155: An employee returns a borrowed laptop used for lab testing. ...; Question 156: What is the BEST item to consider when designing security fo...; Question 157: The primary consideration In maintenance, repair, and operat...; Question 158: Which of the following methods is most often used to manage ...; Question 159: An organization wishes to utilize a managed Domain Name Syst...; Question 160: A company assembles kits of hand tools after receipt of the ...; Question 161: The time spent In queue by a specific manufacturing job is d...; Question 162: What is the process when a security assessor compiles potent...; Question 163: The Chief Information Security Officer (CISO) for an interna...; Question 164: Cloud computing introduces the concept of the shared respons...; Question 165: Payment Card Industry Data Security Standard (PCI DSS) allow...; Question 166: When designing a production cell, which of the following ite...; Question 167: Which of the common vulnerabilities below can be mitigated b...; Question 168: A security engineer is responsible for verifying software re...; Question 169: The Cloud Security Alliance (CSA) publishes the Egregious El...; Question 170: An organization undergoing acquisition merged IT departments...; Question 171: An organization is looking to integrate security concepts in...; Question 172: The security department was notified about vulnerabilities r...; Question 173: A reduction In purchased lot sizes will reduce which of the ...; Question 174: An Information Technology (IT) professional is seeking a con...; Question 175: Which of the following security techniques can be used to en...; Question 176: Which of the following vulnerability types is also known as ...; Question 177: A security team is analyzing the management of data within t...; Question 178: A life cycle assessment (LCA) would be used to determine:...; Question 179: Which of the following production activity control (PAC) tec...; Question 180: A financial services organization wants to deploy a wireless...; Question 181: When assessing a new vendor as a possible business partner, ...; Question 182: During the sales and operations planning (S&OP) process,...; Question 183: Which of the following statements is true about the meantime...; Question 184: The trade-off of increasing safety stock to improve customer...; Question 185: Which of the below represents the GREATEST cloud-specific po...; Question 186: Typically, rough-cut capacity planning (RCCP) in a job shop ...; Question 187: An organization decides to conduct penetration testing. Seni...; Question 188: A security analyst has been asked to build a data retention ...; Question 189: If fixed costs are §200,000 and 20,000 units are produced, a...; Question 190: The development team wants new commercial software to integr...; Question 191: An organization provides customer call center operations for...; Question 192: An organization has determined that it needs to retain custo...; Question 193: A security practitioner has been asked to investigate the pr...; Question 194: What is a malicious activity that overwhelms a Wireless Acce...; Question 195: The results of a threat campaign show a high risk of potenti...; Question 196: How would a master production schedule (MPS) be used In an a...; Question 197: What is the MAIN purpose of risk and impact analysis?...; Question 198: Which of the following measurements indicates there may be b...; Question 199: What General Data Protection Regulation (GDPR) principle say...; Question 200: During a manual source code review, an organization discover...; Question 201: When resolving conflicts, which canon within the ISC2 Code o...; Question 202: What is the FIRST element that must be evaluated in a securi...; Question 203: A large organization that processes protected data issues pr...; Question 204: Which if the following is the FIRST control step in provisio...; Question 205: When performing threat modeling using Spoofing, Tampering, R...; Question 206: Access Control Lists (ACL), protection bits, and file passwo...; Question 207: A house of quality (HOQ) chart aligns which pair of function...; Question 208: What is the BEST preventive measure against employees abusin...; Question 209: An organization's computer incident response team PRIMARILY ...; Question 210: An organization wants to implement Zero Trust (ZT). The Info...; Question 211: In Company XYZ, transaction-costing capability has been Inte...; Question 212: An organization has hired a new auditor to review its critic...; Question 213: If organizational leadership determines that its required co...; Question 214: An advertising agency is working on a campaign for a prospec...; Question 215: A newer automotive supplier has not fully developed its info...; Question 216: The Data Loss Prevention (DLP) team in a major financial ins...; Question 217: A distribution requirements planning (DRP) system has which ...; Question 218: An organization's security assessment recommended expanding ...; Question 219: An organization has a requirement that all documents must be...; Question 220: What is the total load requirement for this work center base...; Question 221: An organization processes healthcare data, stores credit car...; Question 222: One advantage of adopting a supply network perspective Is th...; Question 223: Which of the following should Business Impact Analysis (BIA)...; Question 224: An organization is implementing Zero Trust Network Access (Z...; Question 225: An organization is migrating its access controls to a certif...; Question 226: The most relevant measure of customer service performance Is...; Question 227: A team is tasked with developing new email encryption softwa...; Question 228: What document MOST likely states an organization's values?...; Question 229: A company's primary performance objective Is flexibility. Wh...; Question 230: An effective approach to projecting requirements for materia...; Question 231: A manufacturer has a forecasted annual demand of 1,000,000 u...; Question 232: The development team wants new commercial software to Integr...; Question 233: An executive is approved to travel to a high-risk country. W...; Question 234: The project manager for a new application development is bui...; Question 235: A security engineer developing software for a professional s...; Question 236: What resources does a respondent have when contesting discip...; Question 237: It takes an average of 3 hours to set up a model and 1 hour ...; Question 238: Which of the following incorporates design techniques promot...; Question 239: Which of the following attributes describes a company with a...; Question 240: A logistics manager Is faced with delivering an order via ra...; Question 241: An organization suffered a loss to an asset at a frequency t...; Question 242: Which of the following presents the GREATEST benefit to an o...; Question 243: A security practitioner notices that workforce members retai...; Question 244: Which of the following is a threat modeling methodology used...; Question 245: An organization provides customer call center operations for...; Question 246: An organization starts to develop a drone inspection and def...; Question 247: Moving average forecasting methods are best when demand show...

Question 165/247

LEAVE A REPLY

Download PDF File