Describe Various Security Controls DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   Which of the following is an example of a physical security control?

   • AA password policy requiring complex passwords
   • BA role-based access control (RBAC) matrix
   • CA mantrap at the entrance to a data center
   • DAn intrusion detection system (IDS)
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A backup system was attacked and some backup files were encrypted by ransomware. The organization has a recovery plan that involves restoring the affected files from a clean backup. Which combination of controls BEST describes the recovery process?

   • AA detective control that identifies the ransomware attack
   • BA corrective control that restores the affected files from a known-good backup
   • CA preventive control that blocks the ransomware from spreading
   • DA physical control that secures the backup server room
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A healthcare organization must ensure that only authorized backup administrators can restore patient data, and that every restore action is traceable to a specific individual. Which set of technical controls should be implemented?

   • ARole-based access control and detailed audit logging
   • BA password policy and a security awareness training program
   • CA video surveillance system and a biometric door lock
   • DFull-disk encryption and a firewall
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A backup administrator notices that a ransomware attack encrypted the backup repository. The organization's incident response plan requires that the repository be restored to a known-good state as quickly as possible. Which combination of controls BEST supports this requirement?

   • AA physical access log and biometric scanner at the data center entrance
   • BA firewall rule blocking backup traffic and an intrusion detection system
   • CMulti-factor authentication on the backup console and audit logging
   • DImmutable backup snapshots and a documented restore runbook
   Reveal Solution Discussion Select an answer first