ISC2 Exam CSSLP Topic 7 Question 64 Discussion

Actual exam question for ISC2's CSSLP exam

Question #: 64
Topic #: 7

Which of the following statements best describes the difference between the role of a data owner and the role of a data custodian?

AThe custodian makes the initial information classification assignments, and the operations
manager implements the scheme.

BThe data owner implements the information classification scheme after the initial assignment
by the custodian.

CThe custodian implements the information classification scheme after the initial assignment by
the operations manager.

DThe data custodian implements the information classification scheme after the initial
assignment by the data owner.

Show Suggested Answer

Suggested Answer: A, C, D

The security challenges for DRM are as follows:

Key hiding: It prevents tampering attacks that target the secret keys. In the key hiding process, secret keys are used for

authentication, encryption, and node-locking.

Device fingerprinting: It prevents fraud and provides secure authentication. Device fingerprinting includes the summary of hardware

and software characteristics in order to uniquely identify a device.

OTA provisioning: It provides end-to-end encryption or other secure ways for delivery of copyrighted software to mobile devices.

Answer B is incorrect. Access control is not a security challenge for DRM.

by Aja at Feb 06, 2023, 12:00 PM

Limited Time Offer

25%

Off

Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cordelia

5 days ago

Hmm, I think option D is the correct answer. The data custodian is responsible for implementing the classification scheme, not the owner.

upvoted 0 times

...

Serina

15 days ago

I'm pretty sure the data owner is the one who makes the initial information classification, not the custodian. This seems like a trick question.

upvoted 0 times

Hassie

4 days ago

A) The custodian makes the initial information classification assignments, and the operations manager implements the scheme.

upvoted 0 times

...

Shawna

18 days ago

I see both points, but I think the data owner sets the overall direction and the custodian carries out the implementation.

upvoted 0 times

...

Shelba

20 days ago

I disagree, I believe the data custodian is the one who implements the scheme after the initial assignment by the data owner.

upvoted 0 times

...

Anika

25 days ago

I think the data owner is responsible for implementing the information classification scheme.

upvoted 0 times

...