Certbie
Question 1 of 30
A financial institution is conducting a security audit to assess the effectiveness of its data protection measures. The audit team has identified that the organization processes sensitive customer information, including personally identifiable information (PII) and financial data. They are tasked with evaluating the compliance of the organization with the General Data Protection Regulation (GDPR) and the Payment Card Industry Data Security Standard (PCI DSS). During the audit, they discover that the organization has implemented encryption for data at rest but has not applied encryption for data in transit. What is the most critical risk associated with this oversight, and how should the organization address it to ensure compliance with both GDPR and PCI DSS?
The risk of data interception during transmission, which can lead to unauthorized access to sensitive information; the organization should implement Transport Layer Security (TLS) for data in transit.
The risk of data loss due to hardware failure, which can be mitigated by regular backups of encrypted data at rest.
The risk of non-compliance fines, which can be avoided by conducting regular internal audits without addressing the encryption issue.
The risk of unauthorized access to physical servers, which can be resolved by enhancing physical security measures alone.

Preparing for CISCO 700-765 Cisco Security Architecture for System Engineers? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free