A Security Architect Is Implementing Security Measures in Response to an External

question 6

Multiple Choice

A security architect is implementing security measures in response to an external audit that found vulnerabilities in the corporate collaboration tool suite. The report identified the lack of any mechanism to provide confidentiality for electronic correspondence between users and between users and group mailboxes. Which of the following controls would BEST mitigate the identified vulnerability?

• A) Issue digital certificates to all users, including owners of group mailboxes, and enable S/MIME
• B) Federate with an existing PKI provider, and reject all non-signed emails
• C) Implement two-factor email authentication, and require users to hash all email messages upon receipt
• D) Provide digital certificates to all systems, and eliminate the user group or shared mailboxes

---

Definitions:

Sick Leave

A paid or unpaid absence from work that an employee is allowed to take because of illness.

Vacation Allotments

The designated amounts of vacation time given to employees by an organization as part of their benefits package.

S.T.E.P. Approach

A strategic planning method focusing on scanning, targeting, evaluating, and proceeding to address organizational issues or opportunities.

Open-Book Management

A management approach where financial information is shared with employees to involve them in understanding how their actions affect the company's performance.