Controls and Techniques CCOA Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A hospital has a system where nurses can view patient records, but only the attending physician can modify the treatment plan. The hospital wants to ensure that a nurse cannot accidentally modify a treatment plan. Which access control principle should be enforced?

   • AMandatory access control, using labels to restrict access to treatment plans
   • BRole-based access control, granting all nurses the same permissions as physicians
   • CNeed-to-know, granting nurses access only to the records of patients they are assigned to
   • DLeast privilege, granting nurses read-only access to treatment plans and physicians write access
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of logging in a security context?

   • ATo prevent all security incidents
   • BTo encrypt sensitive data
   • CTo authenticate users
   • DTo record events and activities for later analysis
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which activity involves reviewing logs and system activity to detect potential security incidents?

   • AMonitoring
   • BPatch management
   • CAuthentication
   • DEncryption
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company has a web application that processes customer payments. The security team has implemented a firewall, antivirus on servers, and encryption for data in transit. The company now wants to add a control that would detect an attacker who has already bypassed the firewall and is attempting to exploit a vulnerability in the web application. Which control should they add?

   • AApplication whitelisting on the web server
   • BA second firewall with stricter rules
   • CAn intrusion detection system (IDS) that monitors network traffic for known attack patterns
   • DA VPN for all remote administration
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A data center wants to prevent unauthorized physical access to its server racks and also detect if someone attempts to tamper with the racks. Which physical security control should be implemented?

   • AA security guard at the entrance and a logbook for all personnel entering the data center
   • BA biometric scanner on the server rack doors and a vibration sensor that triggers an alarm if the rack is moved or opened
   • CA proximity card reader on the data center door and a security camera in the hallway
   • DA lock on the data center door and a policy requiring visitors to sign in
   Reveal Solution Discussion Select an answer first