A Security Architect Is Implementing Security Measures in Response to an External

question 319

Multiple Choice

A security architect is implementing security measures in response to an external audit that found vulnerabilities in the corporate collaboration tool suite. The report identified the lack of any mechanism to provide confidentiality for electronic correspondence between users and between users and group mailboxes. Which of the following controls would BEST mitigate the identified vulnerability?

• A) Issue digital certificates to all users, including owners of group mailboxes, and require S/MIME with AES-256.
• B) Federate with an existing PKI provider, and reject all non-signed emails
• C) Implement two-factor email authentication, and require users to hash all email messages upon receipt
• D) Provide digital certificates to all systems, and eliminate the user group or shared mailboxes

---

Definitions:

Actuarial Assumed Rate

The interest rate that an actuary determines to calculate the present value of future pension benefits or contributions.

Risk Averse

A description of an investor's preference for lower risk investments, often characterized by a willingness to accept lower returns in exchange for reduced risk.

Empirical Evidence

Information derived from observation or experimentation that serves as the basis for knowledge or theory.

Defined Benefit Pension Fund

A type of pension plan in which an employee receives a predetermined monthly payment in retirement, the amount of which is based on salary history and length of service.