Fundamentals of Information Security - D430: Set 1

Original practice material: This 72-question set was independently authored for study and review. It is not an official WGU assessment, a ProctorU assessment, a recovered question set, or evidence of a completed exam. Use it only for independent preparation.

Fundamentals of Information Security - D430 Practice Set 1

Format: Self-paced practice
Level: University
Questions: 72 original multiple-choice items
Created: 22 Sep 2026
Study benchmark: 90%+

Questions

1. Question 1. Which security concept is most closely associated with this objective: prevent unauthorized disclosure of sensitive information?

   1. Confidentiality
   2. Integrity
   3. Availability
   4. Nonrepudiation
   Answer and explanation

   Correct answer: A. Confidentiality
   Confidentiality is correct because it is used to prevent unauthorized disclosure of sensitive information.

2. Question 2. Which security concept is most closely associated with this objective: keep information accurate and protected from unauthorized alteration?

   1. Confidentiality
   2. Availability
   3. Privacy
   4. Integrity
   Answer and explanation

   Correct answer: D. Integrity
   Integrity is correct because it is used to keep information accurate and protected from unauthorized alteration.

3. Question 3. Which security concept is most closely associated with this objective: ensure approved users can access systems and data when required?

   1. Authentication
   2. Nonrepudiation
   3. Availability
   4. Integrity
   Answer and explanation

   Correct answer: C. Availability
   Availability is correct because it is used to ensure approved users can access systems and data when required.

4. Question 4. Which security concept is most closely associated with this objective: use multiple complementary safeguards so one failed control does not expose the whole asset?

   1. Job rotation
   2. Defense in depth
   3. Single sign-on
   4. Data minimization
   Answer and explanation

   Correct answer: B. Defense in depth
   Defense in depth is correct because it is used to use multiple complementary safeguards so one failed control does not expose the whole asset.

5. Question 5. Which security concept is most closely associated with this objective: give each user, process, or service only the access needed for its assigned task?

   1. Least privilege
   2. Job rotation
   3. Mandatory vacation
   4. Separation of duties
   Answer and explanation

   Correct answer: A. Least privilege
   Least privilege is correct because it is used to give each user, process, or service only the access needed for its assigned task.

6. Question 6. Which security concept is most closely associated with this objective: limit access to information to people with a justified work purpose?

   1. Open access
   2. Job rotation
   3. Key escrow
   4. Need to know
   Answer and explanation

   Correct answer: D. Need to know
   Need to know is correct because it is used to limit access to information to people with a justified work purpose.

7. Question 7. Which security concept is most closely associated with this objective: divide sensitive tasks so one person cannot complete an entire high-risk process alone?

   1. Mandatory vacation
   2. Change freeze
   3. Separation of duties
   4. Least privilege
   Answer and explanation

   Correct answer: C. Separation of duties
   Separation of duties is correct because it is used to divide sensitive tasks so one person cannot complete an entire high-risk process alone.

8. Question 8. Which security concept is most closely associated with this objective: assign permissions according to job role rather than managing every user individually?

   1. Attribute-based access control
   2. Role-based access control (RBAC)
   3. Mandatory access control
   4. Discretionary access control
   Answer and explanation

   Correct answer: B. Role-based access control (RBAC)
   Role-based access control (RBAC) is correct because it is used to assign permissions according to job role rather than managing every user individually.

9. Question 9. Which security concept is most closely associated with this objective: allow a resource owner to decide who receives access to that resource?

   1. Discretionary access control (DAC)
   2. Mandatory access control
   3. Role-based access control
   4. Network segmentation
   Answer and explanation

   Correct answer: A. Discretionary access control (DAC)
   Discretionary access control (DAC) is correct because it is used to allow a resource owner to decide who receives access to that resource.

10. Question 10. Which security concept is most closely associated with this objective: enforce access decisions using centrally defined labels and clearances?

    1. Discretionary access control
    2. Role-based access control
    3. Least privilege
    4. Mandatory access control (MAC)
    Answer and explanation

    Correct answer: D. Mandatory access control (MAC)
    Mandatory access control (MAC) is correct because it is used to enforce access decisions using centrally defined labels and clearances.

11. Question 11. Which security concept is most closely associated with this objective: evaluate attributes such as department, device state, time, or location before permitting access?

    1. Mandatory access control
    2. Discretionary access control
    3. Attribute-based access control (ABAC)
    4. Role-based access control
    Answer and explanation

    Correct answer: C. Attribute-based access control (ABAC)
    Attribute-based access control (ABAC) is correct because it is used to evaluate attributes such as department, device state, time, or location before permitting access.

12. Question 12. Which security concept is most closely associated with this objective: require evidence from more than one independent authentication factor?

    1. Authorization
    2. Multi-factor authentication (MFA)
    3. Single sign-on
    4. Password rotation
    Answer and explanation

    Correct answer: B. Multi-factor authentication (MFA)
    Multi-factor authentication (MFA) is correct because it is used to require evidence from more than one independent authentication factor.

13. Question 13. Which security concept is most closely associated with this objective: verify that a person, service, or device is who or what it claims to be?

    1. Authentication
    2. Authorization
    3. Accounting
    4. Availability
    Answer and explanation

    Correct answer: A. Authentication
    Authentication is correct because it is used to verify that a person, service, or device is who or what it claims to be.

14. Question 14. Which security concept is most closely associated with this objective: decide which actions an authenticated identity is permitted to perform?

    1. Authentication
    2. Accounting
    3. Nonrepudiation
    4. Authorization
    Answer and explanation

    Correct answer: D. Authorization
    Authorization is correct because it is used to decide which actions an authenticated identity is permitted to perform.

15. Question 15. Which security concept is most closely associated with this objective: record activity so actions can be traced to an identity and reviewed later?

    1. Authentication
    2. Data masking
    3. Accounting
    4. Authorization
    Answer and explanation

    Correct answer: C. Accounting
    Accounting is correct because it is used to record activity so actions can be traced to an identity and reviewed later.

16. Question 16. Which security concept is most closely associated with this objective: create reliable evidence that prevents a sender or actor from credibly denying an action?

    1. Data minimization
    2. Nonrepudiation
    3. Availability
    4. Confidentiality
    Answer and explanation

    Correct answer: B. Nonrepudiation
    Nonrepudiation is correct because it is used to create reliable evidence that prevents a sender or actor from credibly denying an action.

17. Question 17. Which security concept is most closely associated with this objective: produce a fixed-length value used to detect whether data has changed?

    1. Hashing
    2. Encryption
    3. Tokenization
    4. Compression
    Answer and explanation

    Correct answer: A. Hashing
    Hashing is correct because it is used to produce a fixed-length value used to detect whether data has changed.

18. Question 18. Which security concept is most closely associated with this objective: add unique random data before hashing passwords to make precomputed attacks less useful?

    1. Key rotation
    2. Data masking
    3. Tokenization
    4. Salting
    Answer and explanation

    Correct answer: D. Salting
    Salting is correct because it is used to add unique random data before hashing passwords to make precomputed attacks less useful.

19. Question 19. Which security concept is most closely associated with this objective: use the same secret key to encrypt and decrypt data?

    1. Hashing
    2. Digital signing
    3. Symmetric encryption
    4. Asymmetric encryption
    Answer and explanation

    Correct answer: C. Symmetric encryption
    Symmetric encryption is correct because it is used to use the same secret key to encrypt and decrypt data.

20. Question 20. Which security concept is most closely associated with this objective: use a related public and private key pair for cryptographic operations?

    1. Steganography
    2. Asymmetric encryption
    3. Symmetric encryption
    4. Hashing
    Answer and explanation

    Correct answer: B. Asymmetric encryption
    Asymmetric encryption is correct because it is used to use a related public and private key pair for cryptographic operations.

21. Question 21. Which security concept is most closely associated with this objective: use cryptography to verify message origin and detect alteration?

    1. Digital signature
    2. Data compression
    3. Symmetric encryption
    4. Access control list
    Answer and explanation

    Correct answer: A. Digital signature
    Digital signature is correct because it is used to use cryptography to verify message origin and detect alteration.

22. Question 22. Which security concept is most closely associated with this objective: manage certificates, public keys, and trust relationships for public-key cryptography?

    1. Virtual private network
    2. Network address translation
    3. Secure shell
    4. Public key infrastructure (PKI)
    Answer and explanation

    Correct answer: D. Public key infrastructure (PKI)
    Public key infrastructure (PKI) is correct because it is used to manage certificates, public keys, and trust relationships for public-key cryptography.

23. Question 23. Which security concept is most closely associated with this objective: issue and validate digital certificates that bind identities to public keys?

    1. Security information and event management
    2. Keylogger
    3. Certificate authority (CA)
    4. Network switch
    Answer and explanation

    Correct answer: C. Certificate authority (CA)
    Certificate authority (CA) is correct because it is used to issue and validate digital certificates that bind identities to public keys.

24. Question 24. Which security concept is most closely associated with this objective: protect data exchanged between a client and server over a network connection?

    1. Data loss prevention
    2. Transport Layer Security (TLS)
    3. Secure file transfer
    4. Virtual private network
    Answer and explanation

    Correct answer: B. Transport Layer Security (TLS)
    Transport Layer Security (TLS) is correct because it is used to protect data exchanged between a client and server over a network connection.

25. Question 25. Which security concept is most closely associated with this objective: create an encrypted tunnel across an untrusted network?

    1. Virtual private network (VPN)
    2. Wireless access point
    3. Proxy server
    4. Web application firewall
    Answer and explanation

    Correct answer: A. Virtual private network (VPN)
    Virtual private network (VPN) is correct because it is used to create an encrypted tunnel across an untrusted network.

26. Question 26. Which security concept is most closely associated with this objective: apply traffic rules to allow, deny, or restrict network connections?

    1. Intrusion detection system
    2. Proxy cache
    3. Digital certificate
    4. Firewall
    Answer and explanation

    Correct answer: D. Firewall
    Firewall is correct because it is used to apply traffic rules to allow, deny, or restrict network connections.

27. Question 27. Which security concept is most closely associated with this objective: observe events or traffic and alert when suspicious activity is detected?

    1. Firewall
    2. Data loss prevention
    3. Intrusion detection system (IDS)
    4. Intrusion prevention system
    Answer and explanation

    Correct answer: C. Intrusion detection system (IDS)
    Intrusion detection system (IDS) is correct because it is used to observe events or traffic and alert when suspicious activity is detected.

28. Question 28. Which security concept is most closely associated with this objective: detect malicious traffic and actively block or interrupt it?

    1. Vulnerability scanner
    2. Intrusion prevention system (IPS)
    3. Intrusion detection system
    4. Log retention
    Answer and explanation

    Correct answer: B. Intrusion prevention system (IPS)
    Intrusion prevention system (IPS) is correct because it is used to detect malicious traffic and actively block or interrupt it.

29. Question 29. Which security concept is most closely associated with this objective: broker requests between a client and another service while applying policy or filtering?

    1. Proxy server
    2. Certificate authority
    3. Wireless controller
    4. Endpoint agent
    Answer and explanation

    Correct answer: A. Proxy server
    Proxy server is correct because it is used to broker requests between a client and another service while applying policy or filtering.

30. Question 30. Which security concept is most closely associated with this objective: filter HTTP requests to help protect a web application from common web attacks?

    1. Network switch
    2. Data backup
    3. Virtual private network
    4. Web application firewall (WAF)
    Answer and explanation

    Correct answer: D. Web application firewall (WAF)
    Web application firewall (WAF) is correct because it is used to filter HTTP requests to help protect a web application from common web attacks.

31. Question 31. Which security concept is most closely associated with this objective: detect and help stop sensitive data from leaving approved channels?

    1. Network segmentation
    2. Data compression
    3. Data loss prevention (DLP)
    4. Patch management
    Answer and explanation

    Correct answer: C. Data loss prevention (DLP)
    Data loss prevention (DLP) is correct because it is used to detect and help stop sensitive data from leaving approved channels.

32. Question 32. Which security concept is most closely associated with this objective: centralize and correlate security logs to support monitoring and investigation?

    1. Virtual private network
    2. Security information and event management (SIEM)
    3. Certificate authority
    4. Data warehouse
    Answer and explanation

    Correct answer: B. Security information and event management (SIEM)
    Security information and event management (SIEM) is correct because it is used to centralize and correlate security logs to support monitoring and investigation.

33. Question 33. Which security concept is most closely associated with this objective: keep security records long enough to support troubleshooting, audit, and investigation?

    1. Log retention
    2. Data destruction
    3. Key revocation
    4. Job rotation
    Answer and explanation

    Correct answer: A. Log retention
    Log retention is correct because it is used to keep security records long enough to support troubleshooting, audit, and investigation.

34. Question 34. Which security concept is most closely associated with this objective: identify known weaknesses or misconfigurations in systems using automated checks?

    1. Penetration testing
    2. Threat hunting
    3. Disaster recovery
    4. Vulnerability scanning
    Answer and explanation

    Correct answer: D. Vulnerability scanning
    Vulnerability scanning is correct because it is used to identify known weaknesses or misconfigurations in systems using automated checks.

35. Question 35. Which security concept is most closely associated with this objective: conduct an authorized, bounded attempt to validate whether weaknesses can be exploited?

    1. Change management
    2. Business impact analysis
    3. Penetration testing
    4. Vulnerability scanning
    Answer and explanation

    Correct answer: C. Penetration testing
    Penetration testing is correct because it is used to conduct an authorized, bounded attempt to validate whether weaknesses can be exploited.

36. Question 36. Which security concept is most closely associated with this objective: identify assets, threats, vulnerabilities, likelihood, and impact to prioritize treatment?

    1. Patch deployment
    2. Risk assessment
    3. Risk transfer
    4. Log retention
    Answer and explanation

    Correct answer: B. Risk assessment
    Risk assessment is correct because it is used to identify assets, threats, vulnerabilities, likelihood, and impact to prioritize treatment.

37. Question 37. Which security concept is most closely associated with this objective: stop or change an activity so the associated risk is no longer accepted?

    1. Risk avoidance
    2. Risk acceptance
    3. Risk transfer
    4. Risk mitigation
    Answer and explanation

    Correct answer: A. Risk avoidance
    Risk avoidance is correct because it is used to stop or change an activity so the associated risk is no longer accepted.

38. Question 38. Which security concept is most closely associated with this objective: shift some financial consequences of risk to another party through a contract or insurance?

    1. Risk avoidance
    2. Risk acceptance
    3. Risk mitigation
    4. Risk transfer
    Answer and explanation

    Correct answer: D. Risk transfer
    Risk transfer is correct because it is used to shift some financial consequences of risk to another party through a contract or insurance.

39. Question 39. Which security concept is most closely associated with this objective: reduce either the likelihood or impact of a risk through safeguards?

    1. Risk acceptance
    2. Risk avoidance
    3. Risk mitigation
    4. Risk transfer
    Answer and explanation

    Correct answer: C. Risk mitigation
    Risk mitigation is correct because it is used to reduce either the likelihood or impact of a risk through safeguards.

40. Question 40. Which security concept is most closely associated with this objective: identify critical processes and the consequences of disruption?

    1. Threat intelligence
    2. Business impact analysis (BIA)
    3. Vulnerability scanning
    4. Change management
    Answer and explanation

    Correct answer: B. Business impact analysis (BIA)
    Business impact analysis (BIA) is correct because it is used to identify critical processes and the consequences of disruption.

41. Question 41. Which security concept is most closely associated with this objective: restore technology and data after a major disruption?

    1. Disaster recovery (DR)
    2. Business continuity planning
    3. Job rotation
    4. Data classification
    Answer and explanation

    Correct answer: A. Disaster recovery (DR)
    Disaster recovery (DR) is correct because it is used to restore technology and data after a major disruption.

42. Question 42. Which security concept is most closely associated with this objective: keep critical business functions operating during and after disruption?

    1. Disaster recovery
    2. Patch management
    3. Data retention
    4. Business continuity planning (BCP)
    Answer and explanation

    Correct answer: D. Business continuity planning (BCP)
    Business continuity planning (BCP) is correct because it is used to keep critical business functions operating during and after disruption.

43. Question 43. Which security concept is most closely associated with this objective: prepare for, detect, contain, eradicate, and recover from security incidents?

    1. Risk acceptance
    2. Change control
    3. Incident response
    4. Business continuity
    Answer and explanation

    Correct answer: C. Incident response
    Incident response is correct because it is used to prepare for, detect, contain, eradicate, and recover from security incidents.

44. Question 44. Which security concept is most closely associated with this objective: document who handled evidence, when, and how it was preserved?

    1. Key management
    2. Chain of custody
    3. Data classification
    4. Asset inventory
    Answer and explanation

    Correct answer: B. Chain of custody
    Chain of custody is correct because it is used to document who handled evidence, when, and how it was preserved.

45. Question 45. Which security concept is most closely associated with this objective: use deceptive messages to trick recipients into revealing information or taking unsafe action?

    1. Phishing
    2. DDoS
    3. SQL injection
    4. Privilege escalation
    Answer and explanation

    Correct answer: A. Phishing
    Phishing is correct because it is used to use deceptive messages to trick recipients into revealing information or taking unsafe action.

46. Question 46. Which security concept is most closely associated with this objective: target a specific person or group with a tailored deceptive message?

    1. Generic phishing
    2. Brute-force attack
    3. Watering-hole attack
    4. Spear phishing
    Answer and explanation

    Correct answer: D. Spear phishing
    Spear phishing is correct because it is used to target a specific person or group with a tailored deceptive message.

47. Question 47. Which security concept is most closely associated with this objective: manipulate people into bypassing normal security judgment or procedure?

    1. Data masking
    2. Patch management
    3. Social engineering
    4. Network segmentation
    Answer and explanation

    Correct answer: C. Social engineering
    Social engineering is correct because it is used to manipulate people into bypassing normal security judgment or procedure.

48. Question 48. Which security concept is most closely associated with this objective: malware that denies access to data or systems while demanding payment?

    1. Adware
    2. Ransomware
    3. Spyware
    4. Rootkit
    Answer and explanation

    Correct answer: B. Ransomware
    Ransomware is correct because it is used to malware that denies access to data or systems while demanding payment.

49. Question 49. Which security concept is most closely associated with this objective: software intentionally designed to harm, disrupt, spy on, or gain unauthorized access?

    1. Malware
    2. Middleware
    3. Firmware
    4. Data cache
    Answer and explanation

    Correct answer: A. Malware
    Malware is correct because it is used to software intentionally designed to harm, disrupt, spy on, or gain unauthorized access.

50. Question 50. Which security concept is most closely associated with this objective: abuse unsafe database queries by supplying malicious input?

    1. Cross-site scripting
    2. DNS caching
    3. Session timeout
    4. SQL injection
    Answer and explanation

    Correct answer: D. SQL injection
    SQL injection is correct because it is used to abuse unsafe database queries by supplying malicious input.

51. Question 51. Which security concept is most closely associated with this objective: cause a web application to deliver untrusted script to another user's browser?

    1. Packet filtering
    2. Data encryption
    3. Cross-site scripting (XSS)
    4. SQL injection
    Answer and explanation

    Correct answer: C. Cross-site scripting (XSS)
    Cross-site scripting (XSS) is correct because it is used to cause a web application to deliver untrusted script to another user's browser.

52. Question 52. Which security concept is most closely associated with this objective: write beyond intended memory boundaries and potentially alter program behavior?

    1. DNS poisoning
    2. Buffer overflow
    3. SQL injection
    4. Clickjacking
    Answer and explanation

    Correct answer: B. Buffer overflow
    Buffer overflow is correct because it is used to write beyond intended memory boundaries and potentially alter program behavior.

53. Question 53. Which security concept is most closely associated with this objective: gain permissions beyond those originally granted?

    1. Privilege escalation
    2. Credential rotation
    3. Data classification
    4. Network segmentation
    Answer and explanation

    Correct answer: A. Privilege escalation
    Privilege escalation is correct because it is used to gain permissions beyond those originally granted.

54. Question 54. Which security concept is most closely associated with this objective: repeatedly try credentials or keys until a valid one is found?

    1. Spear phishing
    2. Data masking
    3. Session management
    4. Brute-force attack
    Answer and explanation

    Correct answer: D. Brute-force attack
    Brute-force attack is correct because it is used to repeatedly try credentials or keys until a valid one is found.

55. Question 55. Which security concept is most closely associated with this objective: test previously exposed username-password pairs on other services?

    1. Tokenization
    2. Data classification
    3. Credential stuffing
    4. Password salting
    Answer and explanation

    Correct answer: C. Credential stuffing
    Credential stuffing is correct because it is used to test previously exposed username-password pairs on other services.

56. Question 56. Which security concept is most closely associated with this objective: overwhelm a service with traffic from many sources to reduce availability?

    1. Phishing
    2. Distributed denial-of-service (DDoS)
    3. Data exfiltration
    4. Privilege escalation
    Answer and explanation

    Correct answer: B. Distributed denial-of-service (DDoS)
    Distributed denial-of-service (DDoS) is correct because it is used to overwhelm a service with traffic from many sources to reduce availability.

57. Question 57. Which security concept is most closely associated with this objective: keep three copies of data on two media types with one copy offsite or otherwise isolated?

    1. Three-two-one backup strategy
    2. Key escrow
    3. Data masking
    4. Log rotation
    Answer and explanation

    Correct answer: A. Three-two-one backup strategy
    Three-two-one backup strategy is correct because it is used to keep three copies of data on two media types with one copy offsite or otherwise isolated.

58. Question 58. Which security concept is most closely associated with this objective: information stored on a device, disk, database, or backup media?

    1. Data in transit
    2. Data in use
    3. Data classification
    4. Data at rest
    Answer and explanation

    Correct answer: D. Data at rest
    Data at rest is correct because it is used to information stored on a device, disk, database, or backup media.

59. Question 59. Which security concept is most closely associated with this objective: information moving between systems or across a network?

    1. Data in use
    2. Data remanence
    3. Data in transit
    4. Data at rest
    Answer and explanation

    Correct answer: C. Data in transit
    Data in transit is correct because it is used to information moving between systems or across a network.

60. Question 60. Which security concept is most closely associated with this objective: information actively being processed in memory or by an application?

    1. Data retention
    2. Data in use
    3. Data at rest
    4. Data in transit
    Answer and explanation

    Correct answer: B. Data in use
    Data in use is correct because it is used to information actively being processed in memory or by an application.

61. Question 61. Which security concept is most closely associated with this objective: use people, facilities, and physical safeguards to protect equipment and locations?

    1. Physical security
    2. Cryptographic signing
    3. Network monitoring
    4. Log analysis
    Answer and explanation

    Correct answer: A. Physical security
    Physical security is correct because it is used to use people, facilities, and physical safeguards to protect equipment and locations.

62. Question 62. Which security concept is most closely associated with this objective: manage conditions such as fire, power, humidity, and temperature that can damage systems?

    1. Access control list
    2. Network segmentation
    3. Endpoint encryption
    4. Environmental controls
    Answer and explanation

    Correct answer: D. Environmental controls
    Environmental controls is correct because it is used to manage conditions such as fire, power, humidity, and temperature that can damage systems.

63. Question 63. Which security concept is most closely associated with this objective: review, authorize, test, document, and communicate significant system changes?

    1. Disaster recovery
    2. Data destruction
    3. Change management
    4. Risk acceptance
    Answer and explanation

    Correct answer: C. Change management
    Change management is correct because it is used to review, authorize, test, document, and communicate significant system changes.

64. Question 64. Which security concept is most closely associated with this objective: evaluate, test, deploy, and verify updates that address software weaknesses?

    1. Key escrow
    2. Patch management
    3. Data classification
    4. Business continuity
    Answer and explanation

    Correct answer: B. Patch management
    Patch management is correct because it is used to evaluate, test, deploy, and verify updates that address software weaknesses.

65. Question 65. Which security concept is most closely associated with this objective: continually verify access requests and avoid assuming trust based only on network location?

    1. Zero trust
    2. Implicit trust
    3. Discretionary access control
    4. Data retention
    Answer and explanation

    Correct answer: A. Zero trust
    Zero trust is correct because it is used to continually verify access requests and avoid assuming trust based only on network location.

66. Question 66. Which security concept is most closely associated with this objective: separate systems or networks to limit unnecessary communication and lateral movement?

    1. Network address translation
    2. Wireless encryption
    3. Log retention
    4. Network segmentation
    Answer and explanation

    Correct answer: D. Network segmentation
    Network segmentation is correct because it is used to separate systems or networks to limit unnecessary communication and lateral movement.

67. Question 67. Which security concept is most closely associated with this objective: define and maintain approved security settings for systems?

    1. Risk transfer
    2. Data minimization
    3. Secure configuration baseline
    4. Business impact analysis
    Answer and explanation

    Correct answer: C. Secure configuration baseline
    Secure configuration baseline is correct because it is used to define and maintain approved security settings for systems.

68. Question 68. Which security concept is most closely associated with this objective: maintain an accurate record of hardware, software, and important technology assets?

    1. Data destruction
    2. Asset inventory
    3. Chain of custody
    4. Key rotation
    Answer and explanation

    Correct answer: B. Asset inventory
    Asset inventory is correct because it is used to maintain an accurate record of hardware, software, and important technology assets.

69. Question 69. Which security concept is most closely associated with this objective: label information by sensitivity so handling rules match its value and risk?

    1. Data classification
    2. Asset disposal
    3. Log retention
    4. Job rotation
    Answer and explanation

    Correct answer: A. Data classification
    Data classification is correct because it is used to label information by sensitivity so handling rules match its value and risk.

70. Question 70. Which security concept is most closely associated with this objective: build privacy safeguards into processes and systems from the start?

    1. Data destruction
    2. Network segmentation
    3. Risk acceptance
    4. Privacy by design
    Answer and explanation

    Correct answer: D. Privacy by design
    Privacy by design is correct because it is used to build privacy safeguards into processes and systems from the start.

71. Question 71. Which security concept is most closely associated with this objective: define the maximum acceptable amount of data loss measured in time?

    1. Mean time to repair
    2. Service-level agreement
    3. Recovery point objective (RPO)
    4. Recovery time objective
    Answer and explanation

    Correct answer: C. Recovery point objective (RPO)
    Recovery point objective (RPO) is correct because it is used to define the maximum acceptable amount of data loss measured in time.

72. Question 72. Which security concept is most closely associated with this objective: define the maximum acceptable time to restore a service after disruption?

    1. Data classification
    2. Recovery time objective (RTO)
    3. Recovery point objective
    4. Log retention
    Answer and explanation

    Correct answer: B. Recovery time objective (RTO)
    Recovery time objective (RTO) is correct because it is used to define the maximum acceptable time to restore a service after disruption.

Study responsibly: Do not use this resource during graded, proctored, or restricted assessments. Follow your institution's academic-integrity rules.