Verify That Endpoint Systems Meet Security Policies and Standards 100-160 Practice Questions (Page 10)

Questions 46–47

1. 46application · medium

   A clinic that handles patient health records must ensure that endpoint backups meet its data protection policy. The policy requires daily backups and monthly restoration tests. Which action verifies that the backup procedure meets the policy?

   • AConfirm that backup files are stored offsite.
   • BReview backup logs to confirm daily backups occurred and perform a test restoration of a sample of files.
   • CVerify that backup storage is encrypted at rest.
   • DCheck that backup software is installed on all endpoints.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A healthcare provider in the EU stores patient records on laptops used by home-care nurses. The provider must comply with both HIPAA (for US patients) and GDPR (for EU patients). Which endpoint control is necessary to satisfy both regulations?

   • AEncrypt the hard drives of all laptops that store patient data.
   • BRequire nurses to use a VPN when accessing the internet from home.
   • CDisable USB ports on all laptops to prevent data exfiltration.
   • DEnsure that all laptops are physically stored in a locked office when not in use.
   Reveal Solution Discussion Select an answer first