Objective 3.5 Identify and Mitigate Safety and Security Risks CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   An organization is designing a new IoT device and wants to ensure that even if one security control fails, other controls will still protect the system. Which Security-by-Design strategy does this describe?

   • ALeast privilege
   • BPrivacy by design
   • CDefense in depth
   • DSecure coding
   Reveal Solution Discussion Select an answer first
2. 22expert · medium

   A hospital is deploying an AI-based diagnostic tool that will be used by doctors. The tool will have access to patient records. The hospital's security team wants to implement defense in depth. Which combination of controls best exemplifies this strategy?

   • AA firewall at the network perimeter only.
   • BNetwork segmentation, multi-factor authentication, and role-based access control.
   • CEncryption of data at rest only.
   • DA single strong password policy for all users.
   Reveal Solution Discussion Select an answer first