DEMO QUESTIONS

Q1:

In relation to cyber security, what would be the benefit of a public sector organisation joining a Group Purchasing Organisation (GPO)?

A: The GPO can result in cost savings for the organisation due to aggregate spending

B: The GPO is a third party who can host data on behalf of members, thus reducing the risk of hacking

C: The GPO takes on the burden of checking suppliers' security policies and procedures

D: The GPO provides training on cyber security to public sector organisations

Correct Answer: C
A GPO is the same as a Buying Consortium—it’s when multiple organisations pool resources and procure together. The GPO/Consortium does the legwork for procurement activities such as vetting suppliers. This is one advantage of using them—they have the expertise to weed out unsuitable suppliers. Option A is a true statement but doesn’t relate to cyber security. P.167

Domain: 3.1

Q2:

Fluffy Pillows Ltd has recently expanded its operations and has hired more staff. These staff will work remotely and because of this Fluffy Pillows Ltd is in need of buying and upgrading their IT systems. The CEO of Fluffy Pillows is examining the security of currently held data in preparation for the expansion and has recently completed a document which looks into what data is stored where and what the consequences would be if this data were to be stolen or corrupted. In his research he has found multiple data entries for the same information, which he believes could lead to inaccuracies in data reporting. He is also concerned that the data isn’t being stored securely and is unsure whether he should retain some of the confidential personal details on employees who have left the business. He has decided that along with the introduction of new systems it is important that all members of staff at Fluffy Pillows are aware of the responsibilities of storing data correctly and the risks of cyber attacks.

What is the main legal concern regarding the data?

A: Fluffy Pillows may get sued by past employees

B: Data can be hacked and sold on

C: Compliance with regulations such as GDPR

D: Data can easily be corrupted and used for purposes it was not intended for

Correct Answer: C
Compliance with GDPR is the main legal concern. The key word in the question is legal.

Q3:

Fluffy Pillows Ltd has recently expanded its operations and has hired more staff. These staff will work remotely and because of this Fluffy Pillows Ltd is in need of buying and upgrading their IT systems. The CEO of Fluffy Pillows is examining the security of currently held data in preparation for the expansion and has recently completed a document which looks into what data is stored where and what the consequences would be if this data were to be stolen or corrupted. In his research he has found multiple data entries for the same information, which he believes could lead to inaccuracies in data reporting. He is also concerned that the data isn’t being stored securely and is unsure whether he should retain some of the confidential personal details on employees who have left the business. He has decided that along with the introduction of new systems it is important that all members of staff at Fluffy Pillows are aware of the responsibilities of storing data correctly and the risks of cyber attacks.

What is the main concern with regards to the quality of data currently held?

A: Commission

B: Omission

C: Manipulation

D: Corruption

Correct Answer: A
This is commission—data has been created (commissioned) by mistake, leading to multiple entries for the same thing.

Q4:

In order to keep data secure, which three things should be considered?

A: Access, accuracy, confidentiality

B: Location, availability, access

C: Integrity, location, format

D: Confidentiality, availability, integrity

Correct Answer: D
This is the CIA triangle which is from p.143. The three aspects are the three corners of the triangle. Remember this one for the exam as I’ve heard it comes up frequently. Just remember data security = CIA = confidentiality, integrity and availability.

Domain: 3.1

Testimonials – Real Results From Real Students

Your success is our priority. We’re proud to share authentic reviews from students who trusted us, passed their exams, and reached their goals with confidence.
John Doe
John Doe
This site has been a game-changer for my certification journey. The materials are current, reliable, and best of all—free! It's clear they're committed to supporting the IT community.
Emma
Emma
I passed my CompTIA Security+ exam on the first try thanks to this site. Their practice exams and study guides are top-notch. Highly recommend it to anyone serious about IT certifications.
Liam
Liam
I’ve passed three certifications using this site. Their materials are detailed and well-structured, and the fact that it’s free makes it even better.
Isabella
Isabella
If you're studying for any IT certification, this should be your first stop. It’s comprehensive, organized, and constantly updated.
Benjamin
Benjamin
This website helped me prepare for multiple certifications, and today I’m working in cybersecurity. Without their free resources, I wouldn’t be here.

Frequently Asked Question (FAQ's)

Have questions? You’re not alone. We’ve answered the most frequently asked questions to help you feel confident and informed every step of the way.
What is Prep2Certs?

Prep2Certsis a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.

Please contact info@Prep2Certs.com and we will provide you with alternative payment options.

You can by Contacting our sales team.

Free updates are available for the duration of your subscription, after the subscription is expired, your access will no longer be available.