As the CISO, you have been tasked with the execution of the company's key management program. You MUST ensure the integrity of encryption keys at the point of generation. Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?

A. Dual Control

B. Separation of Duties

C. Split Knowledge

D. Least Privilege








 

Suggested Answer: A

Community Answer: C

Reference:
https://info.townsendsecurity.com/bid/23881/PCI-DSS-2-0-and-Encryption-Key-Management


This question is in 712-50 EC-Council Certified CISO (CCISO) Exam
For getting EC-Council Certified CISO (CCISO) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council.
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exam.