Which type of disaster recovery plan (DRP) test requires the whole organization to participate in a scheduled disaster scenario without performing all of the actual tasks?

• A. Tabletop
• B. Dry run
• C. Parallel
• D. Full

An organization consists of many divisions. Its leadership team has gathered the managers and key team members in each division to help create a disaster recovery plan. It studies the type of natural events that commonly occur and the risk involved for each location in which the organization has a data center. What is the leadership team doing in this scenario?

• A. Performing an asset inventory
• B. Identifying the actions
• C. Defining the disaster criteria
• D. Running a disaster declaration process

An organization's security architects determined that all authentication and authorization requests need to be validated before any employee can access corporate resources. Because of this, the organization needs to implement a system that stores and manages the employees' credential information and then validates any requests sent. Which system would allow the organization to meet the architects' requirements?

• A. Bastion host
• B. Zero trust
• C. Identity provider (IdP)
• D. Hardware security module (HSM)

Which level of compliance is required by a cloud service provider to protect customer data at banks and insurance companies?

• A. GLBA
• B. DMCA
• C. FERPA
• D. IDEA

A company has determined that encryption has too much overhead to work with their system and has identified tokenization as an alternative. During this process, the tokenization server generates the token.
Which step should occur immediately after this action?

• A. The application generates a piece of sensitive data.
• B. The application stores the token rather than the original data.
• C. The tokenization server returns the token to the application.
• D. Data is sent to the tokenization server.