Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca CDPSE Exam - Topic 9 Question 82 Discussion

Which of the following is the BEST way to reduce the risk of compromise when transferring personal information using email?
A) Centrally managed encryption
B) End user-managed encryption
C) Private cloud storage space
D) Password-protected .zip files

Isaca CDPSE Exam - Topic 9 Question 82 Discussion

Actual exam question for Isaca's CDPSE exam
Question #: 82
Topic #: 9
[All CDPSE Questions]

Which of the following is the BEST way to reduce the risk of compromise when transferring personal information using email?

Show Suggested Answer Hide Answer
Suggested Answer: A

Encryption is a security practice that transforms data into an unreadable format using a secret key or algorithm. Encryption protects the confidentiality and integrity of data, especially when they are transferred using email or other communication channels. Encryption ensures that only authorized parties can access and use the data, while unauthorized parties cannot decipher or modify the data without the key or algorithm. Encryption also helps to comply with data protection laws and regulations, such as the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA), which require data controllers and processors to implement appropriate technical and organizational measures to safeguard personal data.

Centrally managed encryption is a type of encryption that is implemented and controlled by a central authority or system, such as an organization or a service provider. Centrally managed encryption has the following advantages over end user-managed encryption, private cloud storage space, or password-protected .zip files, for reducing the risk of compromise when transferring personal information using email:

It can enforce consistent and standardized encryption policies and procedures across the organization or the service, such as the encryption standards, algorithms, keys, modes, and formats.

It can automate the encryption and decryption processes for the users, without requiring them to perform any manual actions or install any software or plug-ins on their devices.

It can monitor and audit the encryption activities and incidents, and provide visibility and accountability for the data protection and compliance status.

It can reduce the human errors or negligence that may compromise the encryption security, such as losing or sharing the keys, forgetting or reusing the passwords, or sending the data to the wrong recipients.


Encryption in the Hands of End Users - ISACA, section 2: ''A key goal of encryption is to protect the file even when direct access is possible or the transfer is intercepted.''

The Complexity Conundrum: Simplifying Data Security - ISACA, section 3: ''Centrally managed encryption solutions can help enterprises overcome these challenges by providing a unified platform for encrypting data across different environments and applications.''

Email Encryption: What You Need to Know - Lifewire, section 1: ''Email encryption is a way of protecting your email messages from being read by anyone other than the intended recipients.''

Contribute your Thoughts:

0/2000 characters
Novella
2 hours ago
I’m leaning towards private cloud storage, but I’m not confident if it’s the best option compared to the others listed.
upvoted 0 times
...
Valentine
5 days ago
I’ve seen practice questions that suggest using password-protected files, but I wonder if that’s really enough for sensitive info.
upvoted 0 times
...
Orville
10 days ago
I feel like end user-managed encryption could be risky since not everyone might know how to do it properly.
upvoted 0 times
...
Shizue
16 days ago
I think I remember that centrally managed encryption is often considered more secure because it’s handled by IT, but I’m not entirely sure.
upvoted 0 times
...

Save Cancel