Describe Data Security Elements, AAA, and GRC DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A university is deploying a new research data repository. Professors can upload and edit their own datasets, but only the department head can delete datasets. Graduate students can view datasets but cannot upload or edit. The system requires users to log in with their university credentials. Which concept is primarily responsible for enforcing these different levels of access?

   • AConfidentiality
   • BAuthentication
   • CAccounting
   • DAuthorization
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In risk management, what does 'risk assessment' involve?

   • AEvaluating the likelihood and potential impact of identified risks
   • BTransferring the risk to a third party, such as an insurance company
   • CImplementing controls to reduce the identified risks
   • DIdentifying all possible threats to the organization
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which component of the AAA framework is responsible for tracking user activities and resource usage?

   • AAuthorization
   • BAccounting
   • CAuthentication
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of Governance, Risk, and Compliance (GRC) in an organization?

   • ATo eliminate all security risks from the organization
   • BTo replace all manual security processes with automated tools
   • CTo align IT security efforts with business objectives while managing risk and meeting regulatory requirements
   • DTo ensure that all data is encrypted at rest and in transit
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the first step in the risk management process for data protection?

   • AMonitoring the effectiveness of risk mitigation measures
   • BImplementing security controls to mitigate risks
   • CAssessing the likelihood and impact of each risk
   • DIdentifying potential risks to data assets
   Reveal Solution Discussion Select an answer first