When speaking with a client, an employee realizes a proposed solution may contain a specific cryptographic technology that is prohibited for non-domestic use.
Which of the following documents or regulations should be consulted for confirmation?
A.
Incident response policy B.
International export controls C.
Data loss prevention D.
Remote access policies E.
Licensing restrictions.
B.
When speaking with a client, an employee realizes a proposed solution may contain a specific cryptographic technology that is prohibited for non-domestic use.
Which of the following documents or regulations should be consulted for confirmation?
A.
Incident response policy
B.
International export controls
C.
Data loss prevention
D.
Remote access policies
E.
Licensing restrictions.
B.
The correct answer is B. International export controls.
Explanation: International export controls are laws and regulations that prohibit the export of certain goods, services, or technologies to certain countries or entities for political or security reasons. Cryptographic technologies are often included in these restrictions as they can be used for military or intelligence purposes.
When proposing a solution to a client, it is important to ensure that any cryptographic technology used is compliant with international export controls. This will help to avoid potential legal issues and ensure that the solution can be legally exported.
Therefore, if an employee realizes that a proposed solution may contain a cryptographic technology that is prohibited for non-domestic use, the employee should consult the international export controls regulations to confirm if it is allowed or not.
Option A, incident response policy, is a set of procedures for handling security incidents. This is not relevant to the question.
Option C, data loss prevention, is a strategy for preventing sensitive data from being leaked or stolen. This is not relevant to the question.
Option D, remote access policies, is a set of guidelines for accessing a network remotely. This is not relevant to the question.
Option E, licensing restrictions, refers to limitations on the use or distribution of software or other intellectual property. While this may be relevant in some cases, it is not directly related to the use of cryptographic technology in a proposed solution.