Audit and Testing, Crypto, and Risk mgmt

This source comes first in the order of volatility when conducting a forensic investigation

Which question is NOT likely to be in the scope of his audit of an IAM system?

Digital signatures require asymmetric key cryptography.

Many jurisdictions require audits by law.

Which regulatory standard would NOT require audits of companies in the United States?

Which recovery site option provides readiness in minutes to hours?

This crypto attack offers cryptanalysts the most info about how an crypto algorithm works

What is NOT a symmetric encryption algorithm?

An SOC 1 report primarily focuses on security.

Which of the following would NOT be considered in the scope of org compliance efforts?

What is the only unbreakable cipher when it is used properly?

This permission level allows a reasonable list of activities but does not allow other activties

Which approach to cryptography provides the strongest theoretical protection?

What standard is NOT secure and should never be used on modern wireless networks?

This process involves independent reviewing security logs to assess security controls.

What is NOT an effective key distribution method for plaintext encryption keys?

Which intrusion detection system strategy relies upon pattern matching?

An auditor is least likely to conduct this during the information-gathering phase of an audit?

This is a set of concepts & policies for managing IT infrastructure, development, & operations

An independent reviewer conducting a security controls audit would not ask this question

Which item is an auditor least likely to review during a system controls audit?

With adequate security controls and defenses an organization can often reduce its risk to zero.

This audit data collection method ensures that the info-gathering process covers all areas.

After audit activities are completed, auditors perform data analysis.

Which information security objective allows trusted entities to endorse information?

What is NOT a valid encryption key length for use with the Blowfish algorithm?

Which type of cipher works by rearranging the characters in a message?

Implementing and monitoring risk responses are part of the risk management process.

Which security testing activity uses tools that scan for services running on systems?

This security monitoring tool would most likely identify an unauthorized change to a system?