2.16 Describe the Concepts of Security Data Management 350-201 Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A healthcare organization stores security logs that include patient data. The organization uses a SIEM in a public cloud. To comply with HIPAA, what must the organization ensure?

   • AThe organization must obtain patient consent for log storage.
   • BThe logs must be encrypted at rest only.
   • CAll logs must be stored on-premises.
   • DThe cloud provider must sign a Business Associate Agreement (BAA).
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   An organization wants to detect lateral movement within its network. Which combination of security data sources would provide the most comprehensive visibility?

   • ADNS logs only
   • BEDR alerts only
   • CAuthentication logs and network flow logs
   • DFirewall logs only
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary benefit of visualizing security data in dashboards?

   • AIt encrypts the security data
   • BIt replaces the need for any log collection
   • CIt makes patterns and trends easier to understand quickly
   • DIt automatically blocks malicious traffic
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which practice is essential for complying with privacy regulations when managing security data?

   • AStoring all data indefinitely for future analysis
   • BSharing data with any third party without consent
   • CApplying data minimization and access controls
   • DEncrypting data only during transmission
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which storage format is commonly used for security data to support efficient querying and analysis?

   • ABinary images of entire disks
   • BStructured formats like JSON or Parquet
   • CPrinted paper logs
   • DPlain text files without any structure
   Reveal Solution Discussion Select an answer first