Sep 5 • 🙋♂️ CISSP
CISSP Practice Question (Domain 2: Asset Security)
A SaaS contract ends and the vendor confirms customer records were deleted from production. Retention for those records has expired, and legal wants proof before signing the closure letter. What should the data owner require FIRST?
A. Certificate of destruction covering backups and replicas
B. Cryptographic erasure of the vendor's data encryption keys
C. Signed attestation from the vendor's compliance officer
D. Independent audit of the vendor's deletion procedures
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
0
7 comments
CISSP Practice Question (Domain 2: Asset Security)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+33
2
+30
3
+28
4
+28
5
+26
Powered by