Describe Various Security Controls DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of environmental safeguards, such as fire suppression systems, in a data center?

   • ATo monitor network traffic for malicious activity
   • BTo protect hardware from environmental threats
   • CTo prevent unauthorized access to servers
   • DTo enforce password complexity requirements
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A security team installs a motion sensor that triggers an alarm when someone enters a restricted area. This is an example of which type of control?

   • ADetective
   • BCorrective
   • CAdministrative
   • DPreventive
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A backup administrator needs to ensure that a backup file is not altered between the time it is created and the time it is restored. The organization also requires that the integrity of the backup be verifiable at any point in time. Which technical control should be implemented?

   • AEncrypting the backup file with a strong encryption algorithm
   • BGenerating a cryptographic hash of the backup file and storing it securely
   • CCreating a backup retention policy that specifies how long backups are kept
   • DImplementing role-based access control on the backup repository
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A backup administrator is required to follow a documented procedure when responding to a security incident that affects the backup system. The organization wants to ensure that the procedure is consistently followed and that lessons learned are incorporated. Which administrative control is MOST appropriate?

   • AAn incident response policy that defines roles, steps, and post-incident review
   • BA firewall that blocks malicious traffic
   • CAn intrusion detection system that alerts on suspicious activity
   • DA biometric lock on the server room door
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company's backup team frequently makes configuration errors because there is no standard procedure for changing backup schedules. Management wants to reduce these errors. Which administrative control is MOST appropriate?

   • AEnabling audit logging on the backup server
   • BInstalling a firewall to restrict access to the backup management console
   • CAdding a biometric scanner to the backup server room door
   • DCreating a change management policy that requires approval before any schedule modification
   Reveal Solution Discussion Select an answer first