You save $69.98
A clinical telemetry stream is encrypted, but an attacker can substitute false measurements before the values reach patient-decision software. What control addresses the missing security property?
Confidentiality prevents unauthorized observation; origin authentication and integrity validation detect unauthorized modification of measurements, which could affect patient safety.
Stronger confidentiality does not itself validate data origin or detect substituted messages.
UI access controls do not stop an attacker able to forge messages before ingestion.
Replication can make false readings more available, not more authentic or trustworthy.
A clinical team implements message authentication codes on telemetry. Which remaining security dependency is central to maintaining the claimed integrity protection?
An integrity mechanism is only trustworthy if signers and their keys cannot be freely impersonated. Key compromise can render correctly verified malicious data plausible.
Data format alone is not cryptographic source authentication.
A public shared MAC secret would let attackers forge valid tags even on confidential connections.
Not validating the tag defeats the integrity control at the actual trust boundary.
An application team claims it prevents false medical readings from entering a safety-critical workflow. Which test BEST verifies the new integrity control?
Positive and negative probes test the authenticity of data at ingestion, rather than just confidentiality of transit.
No plaintext proves confidentiality, not that altered messages are rejected.
Formatting and happy-path rendering do not validate integrity checking.
Network availability does not enforce authenticity of the measurement content.
A broker disputes having approved a high-value transfer; shared account passwords prevent reliable attribution. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
A shared secret cannot convincingly attribute a particular authorization to one actor. Key custody and legally applicable signature procedures remain material even after signatures are enabled.
A timestamp proves when a shared credential was used, not which broker actually authorized this payment.
A shared HMAC key may prove group-level integrity but cannot provide an individually attributable signer.
An unbound email can be spoofed or altered and provides weaker transaction-specific signing evidence.
The organization implemented the response to this scenario: A broker disputes having approved a high-value transfer; shared account passwords prevent reliable attribution. The approved response was: Require individual strong identities and transaction-bound digital signatures with protected signing keys and audit evidence. Which statement MOST accurately identifies a remaining risk or constraint?
A shared secret cannot convincingly attribute a particular authorization to one actor. A disputed transaction has a verifiable signer, message integrity, timestamp context and admissible audit trail.
Cryptographic authenticity does not by itself establish delegated signing authority or legal process compliance.
A compromised or shared signing key undermines the claimed individual attribution.
A cryptographic verification alone does not demonstrate human intent or an independently trusted signing time.
Management implemented a response after this event: A broker disputes having approved a high-value transfer; shared account passwords prevent reliable attribution. The response was: Require individual strong identities and transaction-bound digital signatures with protected signing keys and audit evidence. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A disputed transaction has a verifiable signer, message integrity, timestamp context and admissible audit trail. A shared secret cannot convincingly attribute a particular authorization to one actor.
A shared account activity record cannot distinguish individual brokers or bind one to the approved transfer bytes.
A checksum only detects some changes; it does not establish a unique accountable human approver.
Training coverage is not evidence that this transaction has an attributable and verifiable authorization.
A disaster surge overwhelms an otherwise secure portal that passes confidentiality and integrity tests. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
CIA availability requires usable service when authorized users need it, not merely protected data. A standby site may still depend on a failed third party; dependency recovery must be included in availability testing.
Encryption helps confidentiality but cannot add serving capacity or failover when demand surges.
Longer retention may aid forensics but does not establish usable availability during the projected event.
A banner communicates an outage but does not maintain critical business transactions.
The organization implemented the response to this scenario: A disaster surge overwhelms an otherwise secure portal that passes confidentiality and integrity tests. The approved response was: Engineer measured availability capacity and failover requirements based on critical business workflows. Which statement MOST accurately identifies a remaining risk or constraint?
CIA availability requires usable service when authorized users need it, not merely protected data. Fault and load tests demonstrate business transactions within approved recovery and latency objectives.
Shared dependencies can still stop transactions even when application nodes survive.
Data protection controls do not verify usable capacity, latency or recovery time.
Correlated infrastructure dependencies can defeat nominally redundant servers.
Management implemented a response after this event: A disaster surge overwhelms an otherwise secure portal that passes confidentiality and integrity tests. The response was: Engineer measured availability capacity and failover requirements based on critical business workflows. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
Fault and load tests demonstrate business transactions within approved recovery and latency objectives. CIA availability requires usable service when authorized users need it, not merely protected data.
A topology drawing cannot establish transaction completion within an agreed recovery objective.
Transport authenticity does not demonstrate business-service availability at peak load.
Completed backups do not establish live transaction throughput or restoration time.
Multiple product teams sign off on material cyber risks using different financial-loss limits. The board wants consistent executive oversight before individual risk owners make acceptance decisions. What is the BEST governance action?
NIST CSF Govern distinguishes risk strategy and management oversight from implementation. Consistent risk thresholds and delegated decision rights must precede isolated acceptances; individual risk owners still decide within those authorized bounds.
Technical administration is not authority to define enterprise risk tolerance; this would perpetuate inconsistent thresholds.
An external assessor provides exposure evidence, not board-approved business appetite or delegated authority.
Security risk advice does not transfer ownership of the enterprise risk appetite away from accountable business leadership.
An executive risk owner signs a time-limited acceptance for a ransomware exposure based on current controls and forecast impact. What is the MOST important condition that prevents this approval from becoming a permanent waiver?
Risk acceptance is bounded by assumptions. Material control failures, new exploitation or changes in business impact require review by accountable management rather than indefinite reliance on old approval.
A change in risk conditions invalidates indefinite reliance on the original assessment and may require immediate reassessment.
Changing labels or owners without delegated approval does not reallocate risk accountability.
Monitoring is essential to determine whether the accepted exposure remains within approved appetite.
or Guarantee your success by buying the full version which covers the full latest pool of questions. (484 Questions, Last Updated on Oct 31, 2026)
Please check your mailbox for a message from support@examlabs.com and follow the directions.
