ISC CCSP Practice Test - Questions Answers, Page 45

All the others might be included in data labels, but multifactor authentication is a procedure used for access control, not a label.

The other options are the names of the phases, but out of proper order.

The physical security of crypto keys is of some concern, but guards or vaults are not always necessary. Two-person integrity might be a good practice for protecting keys. The best answer to this question-is option A, because it is always true, whereas the remaining options depend on circumstances.

AES is an encryption standard. Link encryption is a method for protecting communications traffic. One-time pads are an encryption method.

Data loss, leak prevention, and protection is a family of tools used to reduce the possibility of unauthorized disclosure of sensitive information. SIEMs are tools used to collate and manage log data. AES is an encryption standard.

All the others might be included in data labels, but we don't usually include data value, since it is prone to change frequently, and because it might not be information we want to disclose to anyone who does not have need to know.

EAR is a Commerce Department program. Evaluation assurance levels are part of the Common Criteria standard from ISO. Digital rights management tools are used for protecting electronic processing of intellectual property.

All the others are valid methods of data discovery; user-based is a red herring with no meaning.

This is not a normal configuration and would not likely provide genuine benefit.