Skip to content

FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices

Which control is most effective at protecting sensitive customer data if an attacker gains access to a database server's storage?

Encryption of data at rest, with keys held separately from the data, best protects sensitive information if storage is accessed, because the stolen content is unreadable without the keys. Backups, web application firewalls and mandatory vacations address other risks.

  1. AEncryption of data at rest with keys managed separately from the dataCorrect
  2. BA more frequent backup schedule
  3. CA web application firewall
  4. DMandatory vacation policy for administrators

Explanation

Encrypting data at rest with separately managed keys leaves stolen storage unreadable. Backups address availability, a web application firewall protects the application layer, and mandatory vacation is a fraud detection control.

Did you get it right without looking?

One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.

Practise Cyber-resilience: Range of PracticesFree diagnostic mock

More Cyber-resilience: Range of Practices questions