Explain Cybersecurity DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A university's backup administrator is designing security for a new backup repository. The plan includes: (1) a firewall restricting access to the backup network, (2) multi-factor authentication for the backup console, (3) encryption of backup data at rest, and (4) regular restore testing. Which principle does this design primarily demonstrate?

   • ALeast privilege — users only have access to what they need
   • BDefense in depth — multiple independent layers of security controls
   • CSeparation of duties — no single person controls the entire process
   • DSingle point of failure — all controls depend on one system
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a defense-in-depth approach, which combination of controls represents a layered security strategy?

   • AA strong password policy and nothing else
   • BA single antivirus software installed on all endpoints
   • CAn encryption solution for data at rest only
   • DA firewall, an intrusion detection system, and regular security awareness training
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A backup administrator is troubleshooting a security incident where an attacker modified backup retention policies to shorten the retention period, causing older backups to be deleted prematurely. The administrator has audit logs that show the changes but cannot determine who made them because the logs do not capture the user identity. Which control would have been most effective in preventing this situation?

   • AA corrective control that restores retention policies from a backup
   • BA deterrent control that displays a warning when retention policies are modified
   • CRole-based access control (RBAC) that restricts who can modify retention policies
   • DA detective control that alerts when retention policies are changed
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A retail company's backup environment uses role-based access control (RBAC) to limit who can modify backup policies, audit logs to record all configuration changes, and a secondary backup copy stored offsite. Which set of control categories do these three measures represent?

   • ACorrective, detective, and preventive
   • BDetective, preventive, and detective
   • CPreventive, detective, and corrective
   • DPreventive, corrective, and detective
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Why is it important to protect backup data from ransomware attacks?

   • ABecause ransomware attacks are the only threat that can affect backup data
   • BBecause backups are automatically immune to ransomware if they are encrypted
   • CBecause backups must be stored in a different geographic location to be effective
   • DBecause backups are often the last line of defense for recovering data after a ransomware attack
   Reveal Solution Discussion Select an answer first