Question 130
A leased SSD with sensitive data is being returned to the supplier after simple file deletion. Which response best addresses the central security requirement with a defensible, risk-based design?
- Overwrite selected visible files and ignore hidden media regions
- Rely solely on quick format
- Identify controller and processor responsibilities contractually and legally by actual decision authority
- Use media-appropriate sanitization, cryptographic erase where suitable and verified disposition
Explanation
Correct Answer
D:Deleted directory entries can leave recoverable data or remapped flash blocks.
Incorrect Answers
A:Partial erasure does not guarantee complete sanitization.
B:Quick formatting may not remove residual content.
C:A processor executes processing on behalf of the controller under documented instructions. Use media-appropriate sanitization, cryptographic erase where suitable and verified disposition.
Question 131
A retired backup tape containing regulated records cannot be securely overwritten in the available equipment. Which response best addresses the central security requirement with a defensible, risk-based design?
- Discard it in general waste after removing the label
- Use approved physical destruction with witnessed custody and destruction certificates
- Assume encryption exists without proving key lifecycle
- Review the intended secondary use against approved purpose, consent or other lawful basis and controls
Explanation
Correct Answer
B:When sanitization is infeasible, documented destruction protects confidentiality.
Incorrect Answers
A:Physical media may still contain data.
C:Unverified encryption is not a substitute for approved destruction.
D:Possessing data does not authorize all secondary processing. Use approved physical destruction with witnessed custody and destruction certificates.
Question 132
A SaaS provider chooses the hosting region but a customer determines why and how user records are processed. Which response best addresses the central security requirement with a defensible, risk-based design?
- Call the SaaS provider the controller merely because it operates servers
- Identify controller and processor responsibilities contractually and legally by actual decision authority
- Assume both parties have identical legal obligations regardless of roles
- Review the intended secondary use against approved purpose, consent or other lawful basis and controls
Explanation
Correct Answer
B:A processor executes processing on behalf of the controller under documented instructions.
Incorrect Answers
A:Physical custody alone does not determine purposes.
C:Legal duties can differ by controller/processor relationship.
D:Possessing data does not authorize all secondary processing. Identify controller and processor responsibilities contractually and legally by actual decision authority.
Question 133
After a prior collection finding, a university consortium reports that the approved safeguard is implemented: “Minimize collection to data necessary for the documented purpose.” The assurance team must decide whether this measure demonstrably works in operation. Which evidence would MOST directly establish its effectiveness?
- Trace each collected field to a documented business need
- Use the completion of this alternative as proof: Collect every possible attribute for future analytics
- Accept a signed change ticket saying: Minimize collection to data necessary for the documented purpose
- Run this adjacent but different test as the sole proof: Match destruction receipts and serial numbers to the inventory
Explanation
Correct Answer
A:Purpose mapping validates minimization.
Incorrect Answers
B:Undefined future value does not justify unlimited collection. Trace each collected field to a documented business need.
C:Trace each collected field to a documented business need. Purpose mapping validates minimization.
D:Chain of disposition prevents missing media. It tests destruction, while this case requires evidence about collection.
Question 134
After a prior use finding, a cloud service provider reports that the approved safeguard is implemented: “Review the intended secondary use against approved purpose, consent or other lawful basis and controls.” The assurance team must decide whether this measure demonstrably works in operation. Which evidence would MOST directly establish its effectiveness?
- Run this adjacent but different test as the sole proof: Trace data location for backups, logs, support exports and failover
- Use the completion of this alternative as proof: Assume internal employees can use data for anything
- Accept a signed change ticket saying: Review the intended secondary use against approved purpose, consent or other lawful basis and controls
- Check approved use cases and actual downstream recipients
Explanation
Correct Answer
D:Lineage review verifies data stays within purpose.
Incorrect Answers
A:Complete flow mapping is necessary for residency assurance. It tests residency, while this case requires evidence about use.
B:Internal access does not remove purpose constraints. Check approved use cases and actual downstream recipients.
C:Check approved use cases and actual downstream recipients. Lineage review verifies data stays within purpose.
Question 135
After a prior retention finding, a regulated financial institution reports that the approved safeguard is implemented: “Set a justified retention schedule, legal exceptions and enforceable disposal triggers.” The assurance team must decide whether this measure demonstrably works in operation. Which evidence would MOST directly establish its effectiveness?
- Run this adjacent but different test as the sole proof: Trace each collected field to a documented business need
- Use the completion of this alternative as proof: Keep everything forever to avoid deletion mistakes
- Compare object ages and holds against approved schedules
- Accept a signed change ticket saying: Set a justified retention schedule, legal exceptions and enforceable disposal triggers
Explanation
Correct Answer
C:Age-based evidence detects over-retention.
Incorrect Answers
A:Purpose mapping validates minimization. It tests collection, while this case requires evidence about retention.
B:Over-retention creates liability and breaches minimization. Compare object ages and holds against approved schedules.
D:Compare object ages and holds against approved schedules. Age-based evidence detects over-retention.
Question 136
After a prior residency finding, a global logistics firm reports that the approved safeguard is implemented: “Apply approved geographic placement and replication restrictions across primary, backup and support paths.” The assurance team must decide whether this measure demonstrably works in operation. Which evidence would MOST directly establish its effectiveness?
- Accept a signed change ticket saying: Apply approved geographic placement and replication restrictions across primary, backup and support paths
- Run this adjacent but different test as the sole proof: Inspect processing agreements and decision rights for real data uses
- Use the completion of this alternative as proof: Change the region label in documentation
- Trace data location for backups, logs, support exports and failover
Explanation
Correct Answer
D:Complete flow mapping is necessary for residency assurance.
Incorrect Answers
A:Trace data location for backups, logs, support exports and failover. Complete flow mapping is necessary for residency assurance.
B:Function-based role evidence avoids label-only compliance. It tests data controller vs processor, while this case requires evidence about residency.
C:Documentation cannot alter physical location. Trace data location for backups, logs, support exports and failover.
Question 137
After a prior remanence finding, a regional hospital network reports that the approved safeguard is implemented: “Use media-appropriate sanitization, cryptographic erase where suitable and verified disposition.” The assurance team must decide whether this measure demonstrably works in operation. Which evidence would MOST directly establish its effectiveness?
- Run this adjacent but different test as the sole proof: Inspect processing agreements and decision rights for real data uses
- Accept a signed change ticket saying: Use media-appropriate sanitization, cryptographic erase where suitable and verified disposition
- Review the method against media type and verify sanitization records
- Use the completion of this alternative as proof: Rely solely on quick format
Explanation
Correct Answer
C:Evidence must match SSD-specific residual risk.
Incorrect Answers
A:Function-based role evidence avoids label-only compliance. It tests data controller vs processor, while this case requires evidence about remanence.
B:Review the method against media type and verify sanitization records. Evidence must match SSD-specific residual risk.
D:Quick formatting may not remove residual content. Review the method against media type and verify sanitization records.
Question 138
After a prior destruction finding, a payment-services company reports that the approved safeguard is implemented: “Use approved physical destruction with witnessed custody and destruction certificates.” The assurance team must decide whether this measure demonstrably works in operation. Which evidence would MOST directly establish its effectiveness?
- Accept a signed change ticket saying: Use approved physical destruction with witnessed custody and destruction certificates
- Match destruction receipts and serial numbers to the inventory
- Run this adjacent but different test as the sole proof: Review the method against media type and verify sanitization records
- Use the completion of this alternative as proof: Discard it in general waste after removing the label
Explanation
Correct Answer
B:Chain of disposition prevents missing media.
Incorrect Answers
A:Match destruction receipts and serial numbers to the inventory. Chain of disposition prevents missing media.
C:Evidence must match SSD-specific residual risk. It tests remanence, while this case requires evidence about destruction.
D:Physical media may still contain data. Match destruction receipts and serial numbers to the inventory.
Question 139
Records scheduled for deletion become relevant to pending litigation. Which response best addresses the central security requirement with a defensible, risk-based design?
- Require asset-serial-matched certificates, controlled chain of custody and sanitization assurance
- Continue automatic deletion because the schedule predates litigation
- Freeze deletion of every business record indefinitely without scope
- Suspend normal deletion for in-scope material under an authorized legal hold
Explanation
Correct Answer
D:Preservation duties override ordinary expiry for specified evidence.
Incorrect Answers
A:Disposal proof must show which assets were irreversibly sanitized or destroyed. Suspend normal deletion for in-scope material under an authorized legal hold.
B:Routine retention does not defeat preservation duty.
C:Unbounded holds cause excessive retention.
Question 140
An aging router is past its vendor end-of-life date but still carries sensitive traffic. Which response best addresses the central security requirement with a defensible, risk-based design?
- Create an owner- and legal-approved enterprise records schedule mapped to data categories
- Assess exposure and plan a supported replacement or controlled isolation
- Assume physical uptime means patch support continues
- Disable all monitoring to reduce maintenance
Explanation
Correct Answer
B:Equipment lifecycle affects available fixes and operational support.
Incorrect Answers
A:A records schedule normalizes retention and disposal obligations. Assess exposure and plan a supported replacement or controlled isolation.
C:Working hardware can be insecure and unsupported.
D:Less visibility increases residual risk.
Certified Information Systems Security Professional (CISSP) Practice Tests