Home / ECCouncil / 112-51

Question list

List of questions

Question 1

(0)

Which of the following algorithms uses a sponge construction where message blocks are XORed into the initial bits of the state that the algorithm then invertible permutes?

Question 2

(0)

Below are the various steps involved in the creation of a data retention policy. 1.Understand and determine the applicable legal requirements of the organization 2.Ensure that all employees unders

Question 3

(0)

Which of the following acts was enacted in 2002 and aims to protect the public and investors by increasing the accuracy and reliability of corporate disclosures?

Question 4

(0)

Robert, an ISP, was instructed to provide network connectivity to all areas even if some locations are inaccessible to capture direct signals from wireless access points. In this process, Robert use

Question 5

(0)

Jessica, a user, wanted to access the Internet from her laptop and therefore sends a connection request to the access point. To identify the wireless client, the access point forwarded that request

Question 6

(0)

Which of the following solutions is a software or a hardware device on a network or host that filters the incoming and outgoing traffic to prevent unauthorized access to private networks?

Question 7

(0)

Which of the following techniques protects sensitive data by obscuring specific areas with random characters or codes?

Question 8

(0)

Which of the following components of VPN is used to manage tunnels and encapsulate private data?

Question 9

(0)

Which of the following practices helps security professionals protect mobile applications from various attacks?

Question 10

(0)

Which of the following layers of loT architecture employs protocols and networks for connecting, sending, and receiving data between devices and network?

Question 31 - 112-51 discussion

Which of the following ISO standards provides guidance to ensure that cloud service providers offer appropriate information security controls to protect the privacy of their customer's clients by securing personally identifiable information entrusted to them?

ISO/IEC 27001

ISO/IEC 27018

ISO/IEC 27011

ISO/IEC 27007

Suggested answer: B

Explanation:

ISO/IEC 27018 is the ISO standard that provides guidance to ensure that cloud service providers offer appropriate information security controls to protect the privacy of their customer's clients by securing personally identifiable information entrusted to them. ISO/IEC 27018 is a code of practice for protecting personal information in cloud storage. The term for the personal data it covers is Personally Identifiable Information or PII. ISO/IEC 27018 is an addendum to ISO/IEC 27001, the first international code of practice for cloud privacy. It helps cloud service providers who process PII to assess risk and implement controls for protecting PII. ISO/IEC 27018 was created in 2014 and updated in 2019. It has the following objectives:

Help the public cloud service provider to comply with applicable obligations when acting as a PII processor, whether such obligations fall on the PII processor directly or through contract.

Enable the public cloud PII processor to be transparent in relevant matters so that cloud service customers can select well-governed cloud-based PII processing services.

Assist the cloud service customer and the public cloud PII processor in entering into a contractual agreement.

Provide cloud service customers with a mechanism for exercising audit and compliance rights and responsibilities in cases where individual cloud service customer audits of data hosted in a multiparty, virtualized server (cloud) environment can be impractical technically and can increase risks to those physical and logical network security controls in place123.

ISO/IEC 27018: Protecting PII in Public Clouds - ISMS.online, ISMS.online, 2019

ISO/IEC 27018 - Wikipedia, Wikipedia, 2021

ISO/IEC 27018:2019 - Information technology --- Security techniques --- Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors, ISO, 2019

Show Answer

asked 18/09/2024

Mithun E

50 questions

Your answer: A B C D

0 comments

Sorted by