Describe Various Security Controls DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A data center operator wants to ensure that only authorized personnel can enter the tape library area. Which physical control is BEST suited for this purpose?

   • AA security awareness training program for all employees
   • BA biometric door lock that grants access only to enrolled employees
   • CA firewall that restricts network access to the tape library management interface
   • DAn audit log that records who accessed the tape library management system
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which security control is used to verify the identity of a user before granting access?

   • AEncryption
   • BAuthorization
   • CAuthentication
   • DAuditing
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is an example of an administrative security control?

   • AA biometric scanner at the data center entrance
   • BA firewall rule that blocks unauthorized traffic
   • CA security awareness training program for employees
   • DAn encryption algorithm used to protect backup data
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A backup administrator is unsure whether they are allowed to restore data from a previous quarter for a compliance audit. The organization wants to provide clear guidance on this matter. Which administrative control should be established?

   • AA data restoration policy that defines who can request and approve restores
   • BAn encryption standard for backup data
   • CA firewall rule that blocks access to the backup console from the internet
   • DA biometric lock on the backup server room door
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of security controls in a data protection environment?

   • ATo ensure data is always available to all users
   • BTo eliminate all possible security risks
   • CTo mitigate risks to confidentiality, integrity, and availability
   • DTo replace the need for security policies
   Reveal Solution Discussion Select an answer first