The DLP project team is about to classify your organization's data. Whats is the primary purpose of classifying data?

You are responsible for managing security of your organization's public cloud infrastructure. You need to implement security to protect the data and applications running in a variety of IaaS and PaaS services, including a new Kubernetes cluster. What type of solution is best suited to this requirement?

Sharing account credentials violates the _ aspect of access control.

You have recovered a server that was compromised in a malware attack to its previous state. What is the final step in the incident response process?

Which encryption type uses a public and private key pair for encrypting and decrypting data?

You have just identified and mitigated an active malware attack on a user's computer, in which command and control was established. What is the next step in the process?

Which type of security assessment requires access to source code?

SQL injection inserts a code fragment that makes a database statement universally true, like _.

You are a security analyst, and you receive a text message alerting you of a possible attack. Which security control is the least likely to produce this type of alert?

Which attack exploits input validation vulnerabilities?

Which is not a principle of zero trust security?