Isa Exam Exam Questions With Expert Verified Solutions

Split knowledge {Ans: Two or more entities need to separately have key components that individually convey no knowledge of the resultant cryptographic key}When to install "critical" applicable vendor-supplied security patches? ---> within _________ of release. {Ans: 1 month}Using time-synchronization technology, synchronize all critical system clocks and times and ensure that the following is implemented for: {Ans: acquiring, distributing, and storing time}An example of a "one-way" cryptographic function used to render data unreadable is: {Ans: SHA-2}Anti-virus solutions may be temporarily disabled only if {Ans: there is legitimate technical need, as authorized by management on a case-by-case basis}When assessing requirement 6.5, testing to verify secure coding techniques are in place to address common coding vulnerabilities includes: {Ans: Reviewing software development policies and procedures}Reviewing and confirming that personnel are following security policies and operational procedures, and that reviews cover: - Daily log reviews - Firewall rule-set reviews - Applying configuration standards to new systems - Responding to security alerts - Change management processes This must be review at least ______________. {Ans: Quarterly}Merchant {Ans: Organization accepting the payment card for payment during a purchase}Verify that the storage location security is reviewed at least ____________________ to confirm