Certified Information Systems Security Professional (CISSP) — Question 36

International bodies established a regulatory scheme that defines how weapons are exchanged between the signatories. It also addresses cyber weapons, including malicious software, Command and Control (C2) software, and internet surveillance software. This is a description of which of the following?

Answer options

• A. International Traffic in Arms Regulations (ITAR)
• B. Palermo convention
• C. Wassenaar arrangement
• D. General Data Protection Regulation (GDPR)

Correct answer: C

Explanation

The correct answer is C, the Wassenaar arrangement, as it specifically includes guidelines for the transfer of conventional arms and dual-use goods, including cyber weapons. The other options, while relevant to various aspects of international law and regulation, do not encompass the same focus on both conventional and cyber weapon exchanges.