(ISC)2 CISSP Certified Information Systems Security Professional Official Practice Tests, 3rd Edition

Chapter 2Asset Security (Domain 2)

SUBDOMAINS:

• 2.1 Identify and classify information and assets
• 2.2 Establish information and asset handling requirements
• 2.3 Provision resources securely
• 2.4 Manage data lifecycle
• 2.5 Ensure appropriate asset retention (e.g. End-of-Life (EOL), End-of-Support (EOS))
• 2.6 Determine data security controls and compliance requirements

1. Angela is an information security architect at a bank and has been assigned to ensure that transactions are secure as they traverse the network. She recommends that all transactions use TLS. What threat is she most likely attempting to stop, and what method is she most likely using to protect against it?
   1. Man-in-the-middle, VPN
   2. Packet injection, encryption
   3. Sniffing, encryption ...